odes -keyout my-nginx.mesh-external.svc.cluster.local.key -subj &#34;/CN=my-nginx.mesh-external.svc.cluster.local/O=some organization&#34;
$ openssl x509 -req -days 365 -CA example.com.crt -CAkey example.com.key -set_serial 0 -in my-nginx.mesh-external.svc.cluster.local.csr -out my-nginx.mesh-external.svc.cluster.local.crt
</code></pre></li><li><p>Generate client certificate and private key:</p><pre><code class=language-bash data-expandlinks=true data-repo=istio>$ openssl req -out client.example.com.csr -ne