# Generate EC P-256 private key
openssl ecparam -name prime256v1 -genkey -noout -out private-key.pem

# Extract the public key / self-signed cert
openssl req -new -x509 -key private-key.pem -out public-key.pem -days 3650 \
  -subj "/CN=fhirsmith-shl"
  
node -e "
const crypto = require('crypto');
const fs = require('fs');
const key = crypto.createPrivateKey(fs.readFileSync('private-key.pem'));
const jwk = key.export({format:'jwk'});
const thumbprint = crypto.createHash('sha256')
  .update(JSON.stringify({crv:jwk.crv,kty:jwk.kty,x:jwk.x,y:jwk.y}))
  .digest('base64url');
console.log('kid: '+thumbprint);
"