本地自签10年证书-THsInk

示例参考

openssl req -x509 -nodes -days 3650 -newkey rsa:2048 \
  -keyout private.key \
  -out certificate.crt \
  -subj "/CN=yourdomain.com" \
  -addext "subjectAltName=DNS:yourdomain.com,DNS:*.yourdomain.com,IP:192.168.1.1"

@和www

openssl req -x509 -nodes -days 3650 -newkey rsa:2048 \
  -keyout private.key \
  -out certificate.crt \
  -subj "/CN=example.com" \
  -addext "subjectAltName=DNS:example.com,DNS:www.example.com"

单个子域名

openssl req -x509 -nodes -days 3650 -newkey rsa:2048 \
  -keyout private.key \
  -out certificate.crt \
  -subj "/CN=blog.example.com" \
  -addext "subjectAltName=DNS:blog.example.com"

泛域名

openssl req -x509 -nodes -days 3650 -newkey rsa:2048 \
  -keyout private.key \
  -out certificate.crt \
  -subj "/CN=yourdomain.com" \
  -addext "subjectAltName=DNS:yourdomain.com,DNS:*.yourdomain.com"

文章版权归作者所有，未经允许请勿转载。

THE END