i><li><p>Generate the root certificate and key:</p><pre><code class=language-bash data-expandlinks=true data-repo=istio>$ make -f ../tools/certs/Makefile.selfsigned.mk root-ca
</code></pre><p>This will generate the following files:</p><ul><li><code>root-cert.pem</code>: the generated root certificate</li><li><code>root-key.pem</code>: the generated root key</li><li><code>root-ca.conf</code>: the configuration for <code>openssl</code> to generate the root certificate</li><li><code>root-cert.csr</code>: the g