OpenSSL creates a non-certified HTTPS certificate (RED)

1. Generate Csr,key

OpenSSL req-new-newkey rsa:2048-sha256-nodes-out example_com.csr-keyout example_com.key-subj "/C=CN/ST=Beijing/L=Be Ijing/o=example inc./ou=web security/cn=example.com "

The above domain name can be modified into their own domain

2.CSR Turn CRT
To generate a CA self-signed certificate:
OpenSSL Req-new-x509-key ca.key-out ca.crt
You can add the certificate Expiration Time option "-days 365".

Can get CRT, installation and other see configuration can be

OpenSSL creates a non-certified HTTPS certificate (RED)