Выполнить в консоли

openssl req -x509 -newkey rsa:4096 -keyout domain.pem -out domain.pem -days 3650 \
    -subj '/C=RU/ST=Moscow/L=Moscow/O=Zremcom/OU=Org/CN=www.domain.loc' \
    -addext 'subjectAltName = DNS:www.domain.loc, DNS:domain.loc'