openssl x509 -req -days 365 -in new.csr -signkey ssl.key -out ssl.crt

if CSR is missing:
openssl req -new -key testingcert.key -out new.csr
openssl genrsa -out testingcert.key 2048 (2048 bits RSA private key for encryption and signing)