创建带SubjectAltName的SSL证书

openssl genrsa -out demo.key 2048

openssl req -key demo.key -new -out demo.csr

touch demo.v3.ext

subjectKeyIdentifier = hash
authorityKeyIdentifier = keyid:always,issuer:always
basicConstraints = CA:TRUE
keyUsage = digitalSignature, nonRepudiation, keyEncipherment, dataEncipherment, keyAgreement, keyCertSign
subjectAltName = DNS:xxx.xxx.xxx.com, DNS:xxx.xxx.xxx.com
issuerAl

创建带SubjectAltName的SSL证书最先出现在Python成神之路。