openssl req \
-x509 \
-nodes \
-newkey rsa:2048 \
-keyout ssl.key\
-out ssl.crt \
-subj "/CN=159.65.126.78" \
-reqexts SAN \
-extensions SAN \
-config <(cat /usr/lib/ssl/openssl.cnf \
<(printf '[SAN]\nsubjectAltName=DNS:159.65.126.78')) \
-sha256 \
-days 3650