# generate
openssl genrsa -out mydomain.key 1024
openssl req -new -key mydomain.key -x509 -out mydomain.crt -days 3650

# check
openssl s_client -state -quiet -connect mail.mydomain.com:443