====== Generate StartSSL Certificate ======
===== for (and on) Uberspace =====

  * set domain variable <code bash>domain=test.feggm.de</code>
  * generate private key (rsa 4096bit) <code bash>openssl genrsa -out startssl_${domain}_ssl.key 4096</code>
  * generate certificate signing request (CSR) <code bash>openssl req -new -sha512 -key startssl_${domain}_ssl.key -out startssl_${domain}_ssl.csr</code>
  * get the certificate signed on [[https://www.startssl.com/|StartSSL]] <code bash>
cat startssl_${domain}_ssl.csr
vi startssl_${domain}_ssl.crt</code>
  * download intermediate certificate from StartSSL <code bash>wget https://www.startssl.com/certs/class1/sha2/pem/sub.class1.server.sha2.ca.pem</code>
  * generate combined certificate file for uberspace-support <code bash>uberspace-prepare-certificate -k startssl_${domain}_ssl.key -c startssl_${domain}_ssl.crt -i sub.class1.server.sha2.ca.pem</code>