.
/certificate
add name=ca-template common-name=ITSERVICE key-usage=key-cert-sign,crl-sign days-valid=3650
sign ca-template name=ITSERVICE
/ip service set www-ssl certificate=ITSERVICE disabled=no
.