{{tag>[routeros certificates]}}

=====RouterOS self signed certificate example=====
For enabling the www-ssl and api-ssl service.

  * Create root certificate<code>
/certificate
add name=root-cert common-name=router days-valid=3650 key-usage=key-cert-sign,crl-sign
sign root-cert
</code>
  * Add HTTPS certificate<code>
/certificate
add name=https-cert common-name=router days-valid=1100
sign ca=root-cert https-cert
</code>
  * Enable https service, disable http<code>
/ip service
set www-ssl certificate=https-cert disabled=no
set www disabled=yes
</code>