Editing Creating a Self-Signed Certificate (section)

== Creating a Cert with a SAN ==


Create a file named ''san.cnf'' with the following information:
<pre>[req]
distinguished_name = req_distinguished_name
x509_extensions = v3_req
prompt = no
[req_distinguished_name]
C = US
ST = VA
L = SomeCity
O = MyCompany
OU = MyDivision
CN = www.company.com
[v3_req]
keyUsage = keyEncipherment, dataEncipherment
extendedKeyUsage = serverAuth
subjectAltName = @alt_names
[alt_names]
DNS.1 = www.company.net
DNS.2 = company.com
DNS.3 = company.net</pre>

Note: alt_names section is the one you have to change for additional DNS.  You can also use ''IP.1'' entries to insert IP addresses as SANs

Save the file and execute the following OpenSSL command, which will generate PEM and KEY file

 openssl req -x509 -nodes -days 730 -newkey rsa:2048 -keyout sancert.key -out sancert.pem -config san.cnf -extensions 'v3_req'