Generate a CSR

GE Canada

openssl genrsa -out gesealants.ca.key 2048

openssl req -new -sha256 -key gesealants.ca.key -subj "/C=DE/ST=Nordrhein-Westfalen/L=Duesseldorf/O=Henkel AG & Co. KGaA/CN=gesealants.ca" -reqexts SAN -config <(cat /etc/ssl/openssl.cnf <(printf "\n[SAN]\nsubjectAltName=DNS:gesealants.ca,DNS:www.gesealants.ca\n")) -out gesealants.ca.csr

openssl req -text -noout -verify -in gesealants.ca.csr

openssl x509 -req -in gesealants.ca.csr -signkey gesealants.ca.key -out gesealants.ca.crt

GE USA

openssl genrsa -out gesealants.com.key 2048

openssl req -new -sha256 -key gesealants.com.key -subj "/C=DE/ST=Nordrhein-Westfalen/L=Duesseldorf/O=Henkel AG & Co. KGaA/CN=gesealants.com" -reqexts SAN -config <(cat /etc/ssl/openssl.cnf <(printf "\n[SAN]\nsubjectAltName=DNS:gesealants.com,DNS:www.gesealants.com\n")) -out gesealants.com.csr

openssl req -text -noout -verify -in gesealants.com.csr






openssl x509 -req -in gesealants.com.csr -signkey gesealants.com.key -out gesealants.com.crt