create selfsigned wildcard certificate

#!/bin/bash
mkdir /etc/ssl/wildcard.yourdomain.tld
cd /etc/ssl/wildcard.yourdomain.tld
openssl genrsa 2048 > host.key
openssl req -new -x509 -nodes -sha1 -days 3650 -key host.key > host.cert
# For a wildcard cert enter *.yourdomain.tld for Common Name. All other options can be left blank for defaults
openssl x509 -noout -fingerprint -text < host.cert > host.info
cat host.cert host.key > host.pem
chmod 400 host.key host.pem