> An encrypted PKCS1-PEM key using AES-128-CBC (2048 bits)

```sh
openssl genrsa -aes128 -out key -passout pass:password 2048
```