rvices:</p><pre><code class=language-bash data-expandlinks=true data-repo=istio>$ openssl req -x509 -sha256 -nodes -days 365 -newkey rsa:2048 -subj &#39;/O=example Inc./CN=example.com&#39; -keyout example.com.key -out example.com.crt
</code></pre></li><li><p>Create a certificate and a private key for <code>my-nginx.mesh-external.svc.cluster.local</code>:</p><pre><code class=language-bash data-expandlinks=true data-repo=istio>$ openssl req -out my-nginx.mesh-external.svc.cluster.local.csr -newkey rsa:2048 -n