Generate StartSSL Certificate

set domain variable

domain=test.feggm.de

generate private key (rsa 4096bit)

openssl genrsa -out startssl_${domain}_ssl.key 4096

generate certificate signing request (CSR)

openssl req -new -sha512 -key startssl_${domain}_ssl.key -out startssl_${domain}_ssl.csr

get the certificate signed on StartSSL

cat startssl_${domain}_ssl.csr
vi startssl_${domain}_ssl.crt

download intermediate certificate from StartSSL

wget https://www.startssl.com/certs/class1/sha2/pem/sub.class1.server.sha2.ca.pem

generate combined certificate file for uberspace-support

uberspace-prepare-certificate -k startssl_${domain}_ssl.key -c startssl_${domain}_ssl.crt -i sub.class1.server.sha2.ca.pem