Use the .csr to generate your certificates and save the generated certificate files (.crt) and the private.key file in a directory in the root (say encryption). code example

openssl req -x509 -newkey rsa:4096 -keyout key.pem -out cert.pem -days 365