use strict;
use warnings;
use IO::Socket::SSL::Utils;

my $ca = 0; # or 1 - depending if it should be a CA or not
my ($c0,$k0) =  CERT_create( CA => $ca, subject => { CN => 'root' });
my ($c1,$k1) =  CERT_create( issuer => [ $c0,$k0 ], subject => { CN => 'server' });

PEM_cert2file($c0,'root.pem');
open(my $fh,'>','server.pem');
print $fh PEM_cert2string($c1).PEM_key2string($k1);