There's local CA on appliance195. It has its repository git@git.bcvsolutions.eu:czechidm/idstory-product-development-ca.git where all generated certificates should be stored (as backup).

cd /root/easyrsa3/
./easyrsa build-server-full applianceXYZ.bcv nopass
git add .
git commit -m "Certifikat pro applianceXYZ.bcv"
git push

Generated files:

• certificate: /root/easyrsa3/pki/issued/applianceXYZ.bcv.crt
• private key: /root/easyrsa3/pki/private/appliance195.bcv.key
• (CA certificate to be put on server is in /root/easyrsa3/pki/ca.crt)