explainshell.com - sudo.8 openssl req -x509 -nodes -days 365 -newkey rsa%3A2048 -keyout %2Fetc%2Fssl%2Fprivate%2Fserver.key -out %2Fetc%2Fssl%2Fcerts%2Fserver.crt

openssl(1ssl) req -x509 -nodes -days 365 -newkey rsa%3A2048 -keyout %2Fetc%2Fssl%2Fprivate%2Fserver.key -out %2Fetc%2Fssl%2Fcerts%2Fserver.crt

execute a command as another user

OpenSSL command line tool

source manpages: sudo, openssl