openssl rsa -in privkey.pem -out new.cert.key
openssl x509 -in new.cert.csr -out new.cert.cert -req -signkey new.cert.key -d

<IfModule mod_ssl.c>
    <VirtualHost _default_:443>
             ServerAdmin webmaster@localhost

            DocumentRoot /var/www/decom/private

            ErrorLog ${APACHE_LOG_DIR}/error-decom-https.log
            CustomLog ${APACHE_LOG_DIR}/access-decom-https.log combined

            SSLEngine on

            SSLCertificateFile      /etc/apache2/ssl/server.crt
            SSLCertificateKeyFile /etc/apache2/ssl/server.key

            #SSLVerifyClient require
            #SSLVerifyDepth  10


            <FilesMatch ".(cgi|shtml|phtml|php)$">
                            SSLOptions +StdEnvVars
            </FilesMatch>
            <Directory /usr/lib/cgi-bin>
                            SSLOptions +StdEnvVars
            </Directory>


            BrowserMatch "MSIE [2-6]"
                            nokeepalive ssl-unclean-shutdown
                            downgrade-1.0 force-response-1.0
            BrowserMatch "MSIE [17-9]" ssl-unclean-shutdown

    </VirtualHost>
</IfModule>