How does one generate a self-signed (later a CSR for a real cert) SSL certificate for three domain controllers (dc1.example.com dc2.example.com dc3.example.com) for the Windows domain EXAMPLE.COM for use with LDAP
The subject, I believe, should be EXAMPLE.COM with three Subject Alternative Names being the dns names for each DC.
How do I generate this certificate preferably with openssl, and definitely without installing certificate services?
EDIT:
An additional requirement is accomplishing this using only existing tools built in to RHEL 6, Windows 2008 R2, or software which can be acquired from Microsoft directly.