For self signed certs, it cuts it down to the bare minimum...
Thanks devpit.org !!!
In case it goes away, and I find myself back here:
openssl req -x509 -nodes -days 365 -newkey rsa:2048 -keyout /etc/apache2/ssl/apache.key -out /etc/apache2/ssl/apache.crt
Reading other certs packed in other formats (p7b):
openssl pkcs7 -noout -text -print_certs -in certfile.p7b
Reading PEM format:
openssl x509 -text -noout -in certfile.crt