openssl req \ -newkey rsa:4096 \ -keyout lvh.me.key \ -x509 \ -nodes \ -new \ -out lvh.me.crt \ -subj "/CN=*.lvh.me" \ -reqexts SAN \ -extensions SAN \ -config <(cat /System/Library/OpenSSL/openssl.cnf \ <(printf '[SAN]\nsubjectAltName=DNS:lvh.me,DNS:*.lvh.me')) \ -sha256 \ -days 3650