Self signed cert 1 liner

openssl req -x509 -nodes -days 36500 -subj "/C=US/ST=California/L=San Diego/O=Project Bitmark/OU=Bitmark/CN=leathan.xyz,www.leathan.xyz" -newkey rsa:2048 -keyout privkey.pem -out cert.pem -config /System/Library/OpenSSL/openssl.cnf



And edit the .cnf file like so:
in the [ v3_ca ] section add the line subjectAltNAme = @alt_names

then at the end of the file add this

[alt_names]
DNS.1:leathan.xyz
DNS.2:www.leathan.xyz