# CA signed
openssl x509 -req -CA ca/ca.crt -CAkey ca/ca.key -in application/webhook.csr -out application/webhook.crt -days 365 -CAcreateserial -extfile domain.ext


# self-signed.
# openssl x509 -signkey application/webhook.key -in application/webhook.csr -req -days 365 -out  application/webhook.crt