diff --git a/files/tes3mp/master/cert/.gitignore b/files/tes3mp/master/cert/.gitignore
new file mode 100644
index 000000000..f8cae59d9
--- /dev/null
+++ b/files/tes3mp/master/cert/.gitignore
@@ -0,0 +1,3 @@
+rootCA.*
+master.*
+serial
diff --git a/files/tes3mp/master/cert/genCA.sh b/files/tes3mp/master/cert/genCA.sh
new file mode 100755
index 000000000..eefe499e9
--- /dev/null
+++ b/files/tes3mp/master/cert/genCA.sh
@@ -0,0 +1,3 @@
+openssl genrsa -out rootCA.key 2048
+openssl req -x509 -new -key rootCA.key -days 365 -out rootCA.crt
+
diff --git a/files/tes3mp/master/cert/genCert.sh b/files/tes3mp/master/cert/genCert.sh
new file mode 100755
index 000000000..e90508bec
--- /dev/null
+++ b/files/tes3mp/master/cert/genCert.sh
@@ -0,0 +1,9 @@
+openssl genrsa -des3 -out master.des3.key 4096
+openssl rsa -in master.des3.key -out master.key
+openssl req -new -key master.key -out master.csr -reqexts SAN -config master.conf
+
+openssl x509 -req -days 365 -in master.csr -CA rootCA.crt -CAkey rootCA.key -CAcreateserial -out master.crt -extensions SAN -extfile master.conf
+
+
+openssl pkcs12 -export -clcerts -in master.crt -inkey master.key -out master.p12
+openssl pkcs12 -in master.p12 -out master.pem -clcerts