:: you will find makecert.exe in the WDK
:: https://docs.microsoft.com/en-us/windows-hardware/drivers/download-the-wdk
:: correct the C:\ path below if needed

:: for help: makecert /? and makecert /!

makecert.exe ^
  -r -pe -n "CN=Hobot-XJ3-CA" -ss My -sr CurrentUser ^
  -a sha256 -cy end -sky signature -sv Hobot-XJ3-CA.pvk -eku 1.3.6.1.5.5.7.3.3 -len 2048 ^
  Hobot-XJ3-CA.cer
