dotnet dev-certs https -ep %USERPROFILE%\.aspnet\https\aspnetapp.pfx -p CB1B9FF1-96A4-40D2-9631-96C7CD2920CE


dotnet dev-certs https -ep %APPDATA%\ASP.NET\Https\aspnetapp.pfx -p CB1B9FF1-96A4-40D2-9631-96C7CD2920CE

# 5dfafe10d8ee3843ca79a9d3ef68070047699155

dotnet dev-certs https --trust

certmgr

${APPDATA}/ASP.NET/Https
${USERPROFILE}/.aspnet/https

http://apetec.com/support/generatesan-csr.htm
https://stackoverflow.com/questions/55485511/how-to-run-dotnet-dev-certs-https-trust

openssl req -new -out san_domain_com.csr -key mysite.key -config mysite.cnf
openssl req -text -noout -in san_domain_com.csr  
openssl x509 -req -days 3650 -in san_domain_com.csr -signkey san_domain_com.key \
-out san_domain_com.crt-extensions v3_req -extfile mysite.cnf
openssl pkcs12 -export -in san_domain_com.crt -inkey san_domain_com.key -out san_domiain_com.p12


generate cert using 
openssl req -x509 -nodes -days 365 -newkey rsa:2048 -keyout localhost.key -out localhost.crt -config localhost.conf
convert cert to pfx using 
openssl pkcs12 -export -out localhost.pfx -inkey localhost.key -in localhost.crt
(optionally) verify cert using 
openssl verify -CAfile localhost.crt localhost.crt
 which should yield localhost.crt: OK

openssl genrsa -out localhost.key 2048
openssl req -new -out localhost.csr -key localhost.key -config localhost.cnf
openssl req -text -noout -in localhost.csr
openssl x509 -req -days 3650 -in localhost.csr -signkey localhost.key \
 -out localhost.crt-extensions req_ext -extfile localhost.cnf
openssl pkcs12 -export -in localhost.crt -inkey localhost.key -out localhost.p12