@Alfon Terron Yeah that doesn’t work not on my Mac with Openssl anyway. Used

openssl genrsa -des3 -out secure.domainnamekey.ket 2048

instead