@echo off

 REM IN YOUR SSL FOLDER, SAVE THIS FILE AS: makeCERT.bat

 REM AT COMMAND LINE IN YOUR SSL FOLDER, RUN: makecert

 REM IT WILL CREATE THESE FILES: example.cnf, example.crt, example.key

 REM IMPORT THE .crt FILE INTO CHROME Trusted Root Certification Authorities

 REM REMEMBER TO RESTART APACHE OR NGINX AFTER YOU CONFIGURE FOR THESE FILES

 REM PLEASE UPDATE THE FOLLOWING VARIABLES FOR YOUR NEEDS.

 SET HOSTNAME=example

 SET DOT=com

 SET COUNTRY=US

 SET STATE=KS

 SET CITY=Olathe

 SET ORGANIZATION=IT

 SET ORGANIZATION_UNIT=IT Department

 SET EMAIL=webmaster@%HOSTNAME%.%DOT%

 (

 echo [req]

 echo default_bits = 2048

 echo prompt = no

 echo default_md = sha256

 echo x509_extensions = v3_req

 echo distinguished_name = dn

 echo:

 echo [dn]

 echo C = %COUNTRY%

 echo ST = %STATE%

 echo L = %CITY%

 echo O = %ORGANIZATION%

 echo OU = %ORGANIZATION_UNIT%

 echo emailAddress = %EMAIL%

 echo CN = %HOSTNAME%.%DOT%

 echo:

 echo [v3_req]

 echo subjectAltName = @alt_names

 echo:

 echo [alt_names]

 echo DNS.1 = *.%HOSTNAME%.%DOT%

 echo DNS.2 = %HOSTNAME%.%DOT%

 )>%HOSTNAME%.cnf

 openssl req -new -x509 -newkey rsa:2048 -sha256 -nodes -keyout %HOSTNAME%.key -days 3560 -out %HOSTNAME%.crt -config %HOSTNAME%.cnf