Alternative legacy: openssl genrsa -out private.key 2048
This method is rarely needed for typical users. openssl for windows 11