openssl genrsa -out CA_neonone.com.key 2048

openssl req -x509 -new -nodes -key CA_neonone.com.key -sha256 -days 1024 -out CA_neonone.com.pem

openssl genrsa -out neonone.com.key 2048

openssl req -new -key neonone.com.key -out neonone.com.csr

authorityKeyIdentifier=keyid,issuer

extendedKeyUsage = serverAuth, clientAuth, codeSigning, emailProtection

basicConstraints=CA:FALSE

keyUsage = digitalSignature, nonRepudiation, keyEncipherment, dataEncipherment

 openssl x509 -req -in neonone.com.csr -CA CA_neonone.com.pem -CAkey CA_neonone.com.key -CAcreateserial -out neonone.com.pem -days 365 -sha256 -extfile v3.ext

openssl pkcs12 -inkey neonone.com.key  -in neonone.com.pem  -export -out neonone.com.pfx

运行 Certmgr.msc