For enabling the www-ssl and api-ssl service.

• Create root certificate

  /certificate
  add name=root-cert common-name=router days-valid=3650 key-usage=key-cert-sign,crl-sign
  sign root-cert

• Add HTTPS certificate

  /certificate
  add name=https-cert common-name=router days-valid=1100
  sign ca=root-cert https-cert

• Enable https service, disable http

  /ip service
  set www-ssl certificate=https-cert disabled=no
  set www disabled=yes