> An encrypted PKCS1-PEM key using AES-256-CBC (2048 bits)

```sh
openssl genrsa -aes256 -out key -passout pass:password 2048
```