Generate a private key and a CSR with SANs, RSA or ECDSA.
openssl req -new -newkey rsa:2048 -nodes -keyout private.key -out request.csr