openssl rsa -in private.pem -RSAPublicKey_out > public.pem
https://blog.it13.de/creating-self-signed-certificate-for-cisco-sg300-series