sudo or admin rights required
openssl req -x509 -nodes -days 3650 -newkey rsa:2048 -out /etc/apache2/ssl/server.crt -keyout /etc/apache2/ssl/server.key -new -subj /CN=pbx.home -reqexts SAN -extensions SAN -config <(cat /etc/ssl/openssl.cnf <(printf '[SAN] subjectAltName=DNS:pbx.home,IP:192.168.10.18')) -sha256