openssl genrsa -out root.key 2048
openssl req -x509 -days 999999 -new -nodes -key root.key -sha256 -out root.crt -addext keyUsage=critical,keyCertSign
cat root.key root.crt > mitmproxy-ca.pem