./easyrsa init-pki
./easyrsa build-ca nopass

# Create a certificate and create signing request
./easyrsa --subject-alt-name="DNS:svr.kmc.local,DNS:svr1.kmc.local,DNS:svr2.kmc.local" gen-req svr.kmc.local nopass

# Sign the request with local CA
./easyrsa --subject-alt-name="DNS:svr.kmc.local,DNS:svr1.kmc.local,DNS:svr2.kmc.local" sign-req server svr.kmc.local

openssl x509 -in pki/issued/svr.kmc.local.crt  -text | grep -A1 'Alternative'

# Convert crt to pem
openssl x509 -in pki/issued/svr.kmc.local.crt -out pki/issued/svr.kmc.local.pem -outform PEM

ServerName svr.kmc.local

SSLCertificateFile /path/to/your_domain_name.pem
SSLCertificateKeyFile /path/to/your_private.key