Generate self-signed certificate which browser knows them

self_signed_certificate.sh

openssl genrsa -des3 -out rootCA.key 4096

openssl req -x509 -new -nodes -key rootCA.key -sha256 -days 1024 -out rootCA.crt

function genssl() {
    openssl genrsa -out "$1.pg.key" 2048

    openssl req -new -sha256 \
        -key "$1.pg.key" \
        -subj "/C=IR/ST=Tehran/O=MPG/OU=Chat/CN=$1.pg" \
        -reqexts SAN \
        -config <(cat /etc/ssl/openssl.cnf <(printf "\n[SAN]\nsubjectAltName=DNS:$1.pg")) \
        -out "$1.pg.csr"


    openssl x509 -req -extfile <(printf "subjectAltName=DNS:$1.pg") -days 1200 -in "$1.pg.csr" -CA rootCA.crt -CAkey rootCA.key -CAcreateserial -out "$1.pg.crt" -sha256
}