openssl req -new -sha256 -key $1.key -subj $2 -reqexts SAN -config <(cat /etc/pki/tls/openssl.cnf <(printf '[SAN]nsubjectAltName=DNS:www.google.com,DNS:www.example.com')) -out $1.csr