Generate the CA
openssl genrsa -aes256 -out /etc/pki/tls/private/CA.key 4096
openssl req -x509 -new -key /etc/pki/tls/private/CA.key -sha256 -days 36500 -out /etc/pki/tls/private/CA.pem
change privileges to the dir
chmod 400 -r /etc/ssl/private/generate self signed certificate
vim /etc/pki/tls/san.ext
authorityKeyIdentifier=keyid,issuer
basicConstraints=CA:FALSE
keyUsage=digitalSignature,keyEncipherment
extendedKeyUsage=serverAuth
subjectAltName=@alt_names
[alt_names]
DNS.1=*.land.krolaki.eu
DNS.2=land.krolaki.eu
openssl genrsa -out /etc/pki/tls/private/wildcard.land.krolaki.eu.key 4096
openssl req -new -key /etc/pki/tls/private/wildcard.land.krolaki.eu.key -out /etc/pki/tls/private/wildcard.land.krolaki.eu.csr
openssl x509 -req -in /etc/pki/tls/private/wildcard.land.krolaki.eu.csr -CA /etc/pki/tls/private/CA.pem -CAkey /etc/pki/tls/private/CA.key -CAcreateserial -out /etc/pki/tls/certs/wildcard.land.krolaki.eu.crt -days 3650 -sha256 -extfile /etc/pki/tls/san.ext