openssl genrsa -out keypair.pem 2048 openssl rsa -in keypair.pem -pubout -out public.pkcs8.key openssl pkcs8 -topk8 -inform PEM -outform PEM -nocrypt -in keypair.pem -out private.pkcs8.key