openssl genpkey -algorithm RSA -out intermediate.key -pkeyopt rsa_keygen_bits:4096


openssl req -new -key intermediate.key -out intermediate.csr -sha256


openssl req -text -noout -verify -in intermediate.csr


openssl x509 -req -in intermediate.csr -CA rootCA.crt -CAkey rootCA.key -CAcreateserial -out intermediate.crt -days 999999 -sha256 -extfile <(echo "basicConstraints=critical,CA:TRUE")


cat intermediate.key intermediate.crt > mitmproxy-ca.pem