Certificate Authority: Cert file:ca.pem in the current directory. Key file:ca.pem in the current directory. Note:Uses same file to store both cert and key of CA. Server/Client: Cert files: in cert subdirectory. commonName subjectAltName ...................................... 0 1 *.a.com 2 w*.a.com 3 *w.a.com 4 **.a.com 5 www.*.com 6 *.com 7 * 8 *.com. 9 *.a.com 10 w*.a.com 11 *w.a.com 12 **.a.com 13 www.*.com 14 *.com 15 * 16 *.com. Key files: in key subdirectory. Note:All the above certificates can be generated easily with the help of gen-cert.sh script and openssl.cnf file present in this directory. Keep both of them in same directory and run the script.Then just type in yes(y) when prompted.Thats it :) To check whether the created certs are Ok,use the following command from the current directory: openssl verify -CAfile ca.pem cert/*.pem