# Tutorial, create selfsigned certificates for the IRC5 OPC UA server

**URL:** <https://tech-community.robotics.abb.com/t/tutorial-create-selfsigned-certificates-for-the-irc5-opc-ua-server/9704>\
**Category:** Developer Tools\
**Tags:** openssl, opc\
**Created:** [September 16, 2020, 10:13pm UTC](https://tech-community.robotics.abb.com/t/tutorial-create-selfsigned-certificates-for-the-irc5-opc-ua-server/9704 "2020-09-16T22:13:28Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![dnilsson](https://dub1.discourse-cdn.com/flex005/user_avatar/tech-community.robotics.abb.com/dnilsson/32/795_2.png) [@dnilsson](https://tech-community.robotics.abb.com/u/dnilsson)\
**Post date:** [September 16, 2020, 10:13pm UTC](https://tech-community.robotics.abb.com/t/tutorial-create-selfsigned-certificates-for-the-irc5-opc-ua-server/9704/1 "2020-09-16T22:13:28Z")

</div>

The certificate generated with the procedure in this video is likely to work with other OPC UA Servers as well.

The openSSL commands used in the video:

- genrsa -out YourPath\key.pem 2048
- req -x509 -days 365 -new -out YourPath\cert.pem -key YourPath\key.pem -config YourPath\cert.conf
- x509 -outform der -in YourPath\cert.pem -out YourPath\tutorial.der

Link to download OpenSSL: [OpenSSL download | SourceForge.net](https://sourceforge.net/projects/openssl/)

Link to IRC5 OPC UA Server: [https://developercenter.robotstudio.com/](https://developercenter.robotstudio.com/)

The Config file:

[req]  
default\_bits = 2048  
default\_md = sha256  
distinguished\_name = subject  
req\_extensions = req\_ext  
x509\_extensions = req\_ext  
string\_mask = utf8only  
prompt = no  
[req\_ext]  
basicConstraints = CA:FALSE  
nsCertType = client, server  
keyUsage = nonRepudiation, digitalSignature, keyEncipherment, dataEncipherment, keyCertSign  
extendedKeyUsage= serverAuth, clientAuth  
nsComment = “OpenSSL Tutorial for IRC5 OPC-UA”  
subjectKeyIdentifier=hash  
authorityKeyIdentifier=keyid,issuer  
subjectAltName = URI:urn:opcua:python:client,IP: 127.0.0.1  
[subject]  
countryName = SE  
stateOrProvinceName = VG  
localityName = VG  
organizationName = ABB  
commonName = PythonOpcUaClient
