创建带SubjectAltName的SSL证书

openssl genrsa -out demo.key 2048

openssl req -key demo.key -new -out demo.csr

touch demo.v3.ext

subjectKeyIdentifier   = hash
authorityKeyIdentifier = keyid:always,issuer:always
basicConstraints       = CA:TRUE
keyUsage               = digitalSignature, nonRepudiation, keyEncipherment, dataEncipherment, keyAgreement, keyCertSign
subjectAltName         = DNS:xxx.xxx.xxx.com, DNS:xxx.xxx.xxx.com
issuerAltName          = issuer:copy

openssl x509 -req -in demo.csr -signkey demo.key -out demo.crt -days 8650 -sha256 -extfile demo.v3.ext