ing request
    (<acronym class="acronym">CSR</acronym>) and a public/private key file:
</p><pre class="programlisting">
openssl req -new -nodes -text -out root.csr \
  -keyout root.key -subj "/CN=<em class="replaceable"><code>root.yourdomain.com</code></em>"
chmod og-rwx root.key
</pre><p>
    Then, sign the request with the key to create a root certificate
    authority (using the default <span class="productname">OpenSSL</span>
    configuration file location on <span class="productname">Linux</span>):
<