OpenSSL self-signed certificate config

self-signed-cert.conf

# Use like:
# 
# ```
# openssl req -x509 -nodes \
#         -days 3650 \
#         -newkey rsa:2048 \
#         -keyout /etc/ssl/private/host.key.pem \
#         -out /etc/ssl/certs/host.crt.pem \
#         -config self-signed-cert.cfg
# ```
[ req ]
x509_extensions        = v3_ca
prompt = no
distinguished_name     = req_distinguished_name
[ req_distinguished_name ]
commonName = Example Reverse Proxy
[ alternate_names ]
DNS.1        = example.com
DNS.2        = *.example.com
[ v3_ca ]
nsCertType = server
subjectKeyIdentifier=hash
authorityKeyIdentifier=keyid:always,issuer:always
basicConstraints = CA:false
keyUsage = critical, digitalSignature, keyAgreement
extendedKeyUsage = serverAuth
nsComment = "OpenSSL Generated Server Certificate"
subjectAltName = @alternate_names