Editing SSL Certificate with SAN (section)

==How to create a self-signed SSL Certificate with SubjectAltName(SAN)==
Generate a Private Key
 openssl genrsa -des3 -out example.com.key 2048
Generate a CSR (Certificate Signing Request)
 openssl req -new -key example.com.key -out example.com.csr
Remove Passphrase from Key
 cp example.com.key example.com.key.org
 openssl rsa -in example.com.key.org -out example.com.key
Create config file for SAN
 touch v3.ext
File content

 subjectKeyIdentifier   = hash
 authorityKeyIdentifier = keyid:always,issuer:always
 basicConstraints       = CA:TRUE
 keyUsage               = digitalSignature, nonRepudiation, keyEncipherment, dataEncipherment, keyAgreement, keyCertSign
 subjectAltName         = DNS:example.com, DNS:*.example.com
 issuerAltName          = issuer:copy

Create the certificate
 openssl x509 -req -in example.com.csr -signkey example.com.key -out example.com.crt -days 3650 -sha256 -extfile v3.ext