Create private key and CSR (Certificate Signing Request)
# openssl req -x509 -sha256 -days 3650 -newkey rsa:4096 -keyout rootCA.key -out rootCA.csr
Self signed certificate file
# openssl x509 -sha256 -days 3650 -in rootCA.csr -signkey rootCA.key -out rootCA.crt
Transfer crt format to p12
# openssl pkcs12 -export -name rootCA -in rootCA.crt -inkey rootCA.key -out rootCA.p12
Using Java keytool transfers p12 to jks
# keytool -importkeystore -destkeystore rootCA.jks -srckeystore rootCA.p12 -srcstoretype pkcs12 -alias rootCA
https://medium.com/@keanupang/create-a-self-signed-certificate-fe572dc6a874#.gwb911uj2
https://medium.com/@imjacobclark/http-2-with-node-js-85da17322812#.sbcr8f68d
