Creating a new SAN-less CRT
---------------------------

(Instructions lifted from Heroku_)

1. Generate a new CSR::
   
       openssl req -new -key server.key -out server.new.csr -nodes -days 10957

2. Generate a new CRT::

       openssl x509 -req -in server.new.csr -signkey server.key -out server.new.crt -days 10957

Creating a new PEM file with your new CRT
-----------------------------------------

1. Concatenate the ``crt`` and ``key`` files into one::

       cat server.new.crt server.key > cacert.new.pem


:Last Modified: 1 Nov 2014

.. _Heroku: https://devcenter.heroku.com/articles/ssl-certificate-self