https://www.openssl.org/docs/manmaster/man1/openssl-req.html https://segmentfault.com/a/1190000014963014