openssl genrsa -out ca.key 4096
openssl req -x509 -days 730000 -new -nodes -key ca.key -sha256 -out ca.crt -addext keyUsage=critical,keyCertSign
cat ca.key ca.crt > mitmproxy-ca.pem