Create a self-signed RSA certificate. Sometimes this is needed for some older software that can't handle newer forms.
openssl req -newkey rsa:2048 -noenc -keyout domain.key -out domain.csr
openssl x509 -signkey domain.key -in domain.csr -req -days 365 -out domain.crt