So instead of regenerating a new SSL key, Signature, and Certificate, I just resigned my old (self signed) CSR from last year. To do this, you need your old PEM/KEY and your old CSR. If you do, then the command is simply: openssl x509 -req -days 365 -in LAST_YEARS.CSR -signkey LAST_YEARS.KEY -out THIS_YEARS.CRT FYI, If you wish to generate a new new self signed cert with an unencrypted key (so you...