What OpenSSL command will generate a certificate signing request (CSR) using the private key file privkey.pem?