Is it possible to locally generate self-signed SSL certificates for a domain, and then just transfer them to the host where the domain is (without CA)?

Question

Digital certificates

Somehow I got confused with these certificates, and I have neither the strength nor the desire to understand thoroughly, I just need to make a self-signed certificate for the site.

Usually I did it with Certbot, but now I need a certificate for .geek - and Certbot does not do it for him (says "wrong suffix".)

Found a shell script on Github: https://github.com/FiloSottile/mkcert - but I somehow misunderstood - can I locally generate certificates for mysite.geek, and then just drag these .pem to the host and register them in the web server configs, or will I definitely raise the CA in the same place where these .pem will be?

I hope I made my question clear :/

Thanks in advance.

Answer 1

Empirically)) it was found out: yes, you can.
those. you can generate certificates locally using this: https://github.com/FiloSottile/mkcert (not as tedious as by hand), and then just copy it to the VPS and connect them there.