To generate a key/certificate pair with ed25519 expiring in 10 years `openssl req -subj '/CN=domain' -new -newkey ED25519 -days 3650 -nodes -x509 -keyout domain.key -out domain.crt`