Create a TLS certificate — self-signed, local CA

Create self-signed HTTPS certificates (RSA, ECDSA or Ed25519) with SANs, or a local CA that issues them. Key, cert and chain in PEM, made on this device.