I constantly keep forgetting how to create a SSL-certificate for Apache, so I start googling like a maniac every time I set up a new instance. Today, I think, I found the ultimate instruction:

openssl req \ 
-new \ 
-x509 \ 
-days 365 \ 
-sha1 \ 
-newkey rsa:1024 \ 
-nodes \ 
-keyout server.key \ 
-out server.crt \ 
-subj '/O=Seccure/OU=Seccure Labs/CN=www.seccure.lab'

The above commands will create a new (-new) certificate (-x509) that will be valid for one year (-days 365) and will be signed using the SHA1 algorithm (-sha1). The RSA private key will be 1024 bits long (-newkey rsa:1024), and will not be protected by a passphrase (-nodes). The certificate and the private/public key pair will be created in the "server.crt" and "server.key" files (-out server.crt -keyout server.key). The "-subj" parameter says that the company's name is "Seccure" (O=Seccure), the department's name is "Seccure Labs", and the web server's fully qualified domain name is "www.seccure.lab".

Voila! Now that's what I call concise! Congratulations and thanks to the author Artur Maj.