openssl 生成证书

一、

openssl req -x509 -newkey rsa:2048 -sha256 -days 36600 -nodes -keyout server.key -out server.crt -subj "/CN=example.com" -addext "subjectAltName=DNS:example.com,DNS:*.example.com,DNS:localhost,IP:127.0.0.1"

二、

openssl pkcs12 -export -in server.crt -inkey server.key -out iis.pfx