<?php
// bei SSL-Zertifikate ist der commonName der zu sichernde Domain-Name
// bei S/MIME-Zertifikate ist der commonName der Eigentümer der E-Mail-Adresse
// die Felder location und identification beziehen sich auf den Eigentümer der
// zu sichernden Domain oder des E-Mail-Eigentümers
$dn = array(
    "commonName" => "abcd10.hello.com",
    "subjectAltName" => "DNS: clock47.omicron.at, DNS: clock47, DNS: 192.168.0.11, IP: 192.168.0.1"
);
 
$IP_Address = "192.168.20.10";
 
$xtra_attributes = array(
    "subjectAlternativeNames" => "DNS: clock47.omicron.at, DNS: clock47, DNS: 192.168.0.11, IP: 192.168.0.11"
);
 
// Erzeugen eines neuen privaten (und öffentlichen) Schlüsselpaars
$privkey = openssl_pkey_new(array(
    "private_key_bits" => 2048,
    "private_key_type" => OPENSSL_KEYTYPE_RSA,
));
 
$stringPrivkey = '';
openssl_pkey_export($privkey, $stringPrivkey);
echo $stringPrivkey;
$myout;
exec("openssl req"  ." -nodes" 
                    ." -new"
                    ." -key=\"" 
                    .$stringPrivkey . "\""
                    ." -subj=\"" 
                    ."\/CN=abc10.hello.com" . "\"" 
                    ." -addtext=\"subjectAltName="
                    ."DNS: clock47.omicron.at, DNS: clock47, DNS: 192.168.0.11, IP: 192.168.0.11"
                    ." -noout -text"
                    , $myout);
 
var_dump($myout);
?>

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