openssl s_server -accept 8443 -cert server.crt -key server.key -www Access https://localhost:8443 in browser (ignore cert warning). The -www option sends HTTP status. Though HPKP is deprecated, computing SPKI fingerprint:
[alt_names] DNS.1 = myapp.local DNS.2 = www.myapp.local IP.1 = 192.168.1.100 IP.2 = 10.0.0.5 openssl for windows 11
Import-Certificate -FilePath "C:\path\to\root.cer" -CertStoreLocation "Cert:\LocalMachine\Root" PowerShell can call OpenSSL directly. Example function to generate a self-signed cert for IIS testing: openssl s_server -accept 8443 -cert server
openssl req -new -key private.key -out request.csr -subj "/C=US/ST=Texas/L=Austin/O=MyOrg/CN=myserver.example.com" openssl for windows 11