openssl ecparam -name prime256v1 > ecdsaparam

openssl req -nodes -new -newkey ec:ecdsaparam -config mainsub.cnf -keyout mainsubkey.pem -out mainsubreq.pem

openssl ca -batch -create_serial -config maincaconf.cnf -days 3650 -in mainsubreq.pem -out mainsubcert.pem
