openssl req -x509 -newkey rsa:2048 -nodes -keyout=test_key.pem -out test.pem -days=365 -subj='/CN=test.ru'  -reqexts SAN     -extensions SAN     -config <(cat /usr/lib/ssl/openssl.cnf \
        <(printf '[SAN]\nsubjectAltName=@alt_names\n[alt_names]\nDNS.1 = test.ru\nDNS.2 = *.test.ru'))     -sha256