渠道一

在线签发

https://myssl.com/create_test_cert.html

https://cookcode.cc/selfsign

https://www.ssleye.com/ssltool/self_sign.html

https://zh.rakko.tools/tools/46/

http://web.chacuo.net/netcreatecrt

https://csr.chinassl.net/free-ssl.html

https://www.hohnstaedt.de/xca/ （https://www.trustasia.com/view-ssl-certificate-generation-tool/）

渠道二

自建工具签发

https://github.com/FiloSottile/mkcert

https://github.com/jsha/minica

https://github.com/PieerePi/ssl.ca

渠道三

使用OPENSSL

https://www.openssl.org/docs/manmaster/man1/openssl-req.html

openssl req -new -x509 -nodes -days 3650 -keyout baidu.com.key -out baidu.com.crt

Common Name自己填，没有中间证书，直接安装（https://hostloc.com/thread-799151-1-1.html）

https://www.ibm.com/docs/zh/api-connect/10.0.1.x?topic=overview-generating-self-signed-certificate-using-openssl

https://docs.pingcap.com/zh/tidb/dev/generate-self-signed-certificates

https://ningyu1.github.io/site/post/51-ssl-cert/

https://www.myfreax.com/creating-a-self-signed-ssl-certificate/

https://smallstep.com/

https://github.com/cloudflare/cfssl

https://keymanager.org/