https://www.51sec.org/2014/04/03/generate-2048-bits-csr-in-checkpoint-firewall/