#
# Insert at the end:
#
 
[ alternate_names ]
DNS.1        = acd-lb.domain.de
DNS.2        = acd-lb.domain.local
DNS.3        = acd-lb
 

#

# Insert 

in 

this 

section:
#

 
[ v3_ca ]
subjectAltName      = @alternate_names
 

#

# Insert 

or 

modify 

in 

this 

section:
#

 
[ v3_ca ]
keyUsage = digitalSignature, keyEncipherment
 

#

# Change 

or 

comment 

in 

this 

section:
#

 
[ CA_default ]
copy_extensions = copy

mkdir /etc/ssl/newkey
openssl genrsa -out /etc/ssl/newkey/cert.key 3072
openssl req -new -x509 -key /etc/ssl/newkey/cert.key -sha256 -out /etc/ssl/newkey/cert.pem -days 730

 
#
# Answer the questions as follows (for example):
#

You are about to be asked to enter information that will be incorporated
into your certificate request.
What you are about to enter is what is called a Distinguished Name or a DN.
There are quite a few fields but you can leave some blank
For some fields there will be a default value,
If you enter '.', the field will be left blank.
-----
Country Name (2 letter code) [XX]:DE
State or Province Name (full name) []:Bavaria
Locality Name (eg, city) [Default City]:Munich
Organization Name (eg, company) [Default Company Ltd]:jtel GmbH
Organizational Unit Name (eg, section) []:IT
Common Name (eg, your name or your server's hostname) []:acd-lb.domain.de
Email Address []:lewis.graham@jtel.de

openssl x509 -in 

/etc/ssl/newkey/cert.pem

 -text -noout

# Check if all DNS names are listed with this entry:
# X509v3 Subject Alternative Name:

#
# Frontend http redirects to https
#
frontend acdportal_http
        mode            http
        bind            :80
        redirect        scheme https if !{ ssl_fc }

#

# Frontend for https with certificate
#
frontend acdportal_https
        mode            http
        bind            :443 ssl crt /etc/

haproxy/

haproxy.pem  #verify optional
...