Comment by hamburglar

Yes, but making it really easy by giving the exact openssl (or whatever) commands would be super useful if you needed to do it.