I know to create a root certificate with openssl, I should first create a root private key:
openssl genrsa -out rootCA.key 2048
Then, self sign the certificate:
openssl req -x509 -new -nodes -key rootCA.key -sha256 -days 1024 -out rootCA.p12
I am wondering, how can I generate a root certificate in .p12 format without a private key?