$ openssl genrsa

Encrypted
Password-protected
private RSA key
Choose one

$ openssl rsa
Not encrypted
Unprotected
private RSA key

$ openssl req
Not encrypted
Certificate Signing
request

$ openssl x509
Not encrypted

Website
certificate

Web server
 $ openssl genrsa
Encrypted
Password-protected
private RSA key

$ openssl req
Not encrypted
Certificate Signing
request

$ openssl x509
Not encrypted

Website
certificate

Web server
 $ openssl genrsa $ openssl genrsa
Encrypted Encrypted
Password-protected Password-protected
private RSA key private RSA key
Choose one

$ openssl rsa
Not encrypted
Unprotected
private RSA key

$ openssl req $ openssl req

Not encrypted
Certificate Signing
request

$ openssl x509
Not encrypted Not encrypted

Website Certification Authority

certificate certificate

Web server Browser

 $ openssl genrsa $ openssl genrsa
Encrypted Encrypted
Password-protected Password-protected
private RSA key private RSA key

$ openssl req $ openssl req

Not encrypted
Certificate Signing
request

$ openssl x509
Not encrypted Not encrypted

Website Certification Authority

certificate certificate

Web server Browser