openssl req -new -key privkey.pem -out root.csr
openssl x509 -req -days 3650 -sha1 -extensions v3_ca -signkey privkey.pem -in root.csr -out root.crt
openssl pkcs12 -export -in root.crt -inkey privkey.pem -out an.pfx
openssl req -new -key privkey.pem -out root.csr
openssl x509 -req -days 3650 -sha1 -extensions v3_ca -signkey privkey.pem -in root.csr -out root.crt
openssl pkcs12 -export -in root.crt -inkey privkey.pem -out an.pfx