openssl req -x509 -newkey rsa:4096 -nodes -keyout idp-browser.key -out idp-browser.pem -days 10000 -subj "/CN=localhost"
openssl pkcs12 -in idp-browser.pem -inkey idp-browser.key -export -out idp-browser.p12