create_ssl_csr.sh

# Uncomment req_extensions = v3_req # The extensions to add to a certificate request in '/etc/ssl/openssl.cnf'
#[ v3_req ]
# 
## Extensions to add to a certificate request
# 
#basicConstraints = CA:FALSE
#keyUsage = nonRepudiation, digitalSignature, keyEncipherment
# 
## getting alternate names in the cert, so you can use both the short
## name and the longer name for this...
#subjectAltName = @alt_names
# 
#[alt_names]
#DNS.1 = hostname
#DNS.2 = hostname.fdqn.com

openssl genrsa -out ssl-cert.key 2048
openssl req -new -key ssl-cert.key -out ssl-cert.csr -subj "/C=US/ST=MA/L=Wakefield/O=YOUR_ORG/CN=*.fdqn.com"

openssl x509 -in certnew.cer -inform d -out ssl-cert.pem