I'm trying to make a private key for an SSL certificate on localhost using wamp64. I have downloaded the Shining Light Productions OpenSSL for windows 64 bit and I can make a private key using sha1.
The following bit of code works (to my relief)
openssl req -new -x509 -nodes -sha1 -key private.key -out certificate.crt - days
However when opening the site in Chrome50+ it informs me that the site is not secure because of the SHA1 depreciated through its security vulnerabilities.Can I use x509 with sha256 or is there a better command?
CN=example.com
is probably wrong. Hostnames always go in the SAN. If its present in the CN, then it must be present in the SAN too (you have to list it twice in this case). For more rules and reasons, see How do you sign Certificate Signing Request with your Certification Authority and How to create a self-signed certificate with openssl?