Configuring HTTPS with Apache HTTPS Server lecture
Under "Creating a Certificate Signing Request"
The first sample uses a deprecated option -nodes to not encrypt the key
according to `openssl req -help` it should use -noenc instead.
-noenc Don't encrypt private keys
-nodes Don't encrypt private keys; deprecated
(Note, I also found it confusing that this says "generate a basic CSR" then you use the `-x509` option to output an X.509 certificate structure instead of a cert request)