How to renew an expired self-signed SSL certificate

Tonight I struggled a little longer than one should have to with using Postman in Chrome to access some Mifos X REST API on localhost. The Mifos X localhost server for dev fires up a Tomcat with a self-signed SSL certificate (and forces you to use that, the non-SSL port redirects to it). Be that a bright idea as it may, it's regularly causing issues for folks. When it turned out that this blog outlining how to do the usual handstand to import a cert. didn't suffice, things got a little bit more interesting.. ;-) Ah, cert expired! OK, I can fix that and contribute a PR. Still NOK.. Chrome's end-user import certificate UI isn't actually doing anything on (Ubuntu?) Linux?! One must use certutil from libnss3-tools as described here.

I'll try to get a free wildcard SSL cert from GlobalSign for Mifos localhost dev to make this a bit more painless for others...