generate self-signed x.509 certificates for local dev · pem format · keys never leave your browser
one per line · DNS names or IPv4/IPv6 addresses · SAN is required by modern browsers