It's recommended to use req rather than x509 to create self-signed certificates