Tangentially related, if you generate certificates infrequently enough that you always have to look up openssl command line options check out https://github.com

Tangentially related, if you generate certificates infrequently enough that you always have to look up openssl command line options check out https://github.com/chris2511/xca/ https://github.com/chris2511/xca/. It's basically keepass but for certs instead of passwords.