#!/bin/bash
openssl rsa -in account.key -pubout 2>&1 | grep -v "writing"
echo "press enter..." >&2
read enter
openssl req -new -sha256 -key domain.key -subj "/" \
  -reqexts SAN -config <(cat /etc/ssl/openssl.cnf \
  <(printf "[SAN]\nsubjectAltName=DNS:$1"))