下载 mkcert

https://github.com/FiloSottile/mkcert/releases

--1.颁发数据签名证书 
D:\Work\elitel\mkcert>mkcert-v1.4.4-windows-amd64.exe localhost 127.0.0.1 10.45.1.100 10.45.1.101

Created a new certificate valid for the following names 📜
 - "localhost"
 - "127.0.0.1"
 - "10.45.1.100"
 - "10.45.1.101"

--2.查看根证书
D:\Work\elitel\mkcert>mkcert-v1.4.4-windows-amd64.exe -CAROOT

C:\Users\hi_bj\AppData\Local\mkcert

--3.将根证书安装到客户端
拷贝出上一步的rootCA文件，根据不同环境安装

##############################################
####################使用Open SSL转格式##########

下载 Open SSL
https://slproweb.com/download/Win64OpenSSL_Light-3_3_0.exe

--使用open ssl生成IIS证书
D:\Application\OpenSSL-Win64\bin>openssl.exe pkcs12 -export -out D:\server.pfx -in server.pem -inkey server.key

Enter Export Password:
Verifying - Enter Export Password:
注意：server.pem -inkey server.key为 mkcert的证书和key

--使用open ssl查看证书信息
D:\Application\OpenSSL-Win64\bin>openssl x509 -in localhost+3.pem -text -noout
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:38:8f:2f:47:b1:11:d2:cc:88:e4:be:3e:36:44:73
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: O=mkcert development CA, OU=BAIJF\hi_bj@baijf (JUNFEI BAI), CN=mkcert BAIJF\hi_bj@baijf (JUNFEI BAI)
        Validity
            Not Before: May 29 06:06:17 2024 GMT
            Not After : Aug 29 06:06:17 2026 GMT
        Subject: O=mkcert development certificate, OU=BAIJF\hi_bj@baijf (JUNFEI BAI)
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:bd:12:44:a1:63:62:c9:04:e5:c8:0b:4b:a0:83:
                    95:7d:ed:61:d8:84:fe:ad:11:84:91:55:ea:a9:b7:
                    07:e2:bf:18:21:bb:7a:52:a8:ab:a8:5a:67:e2:df:
                    bc:7b:fd:49:f1:ad:71:30:f0:e1:7a:38:d9:23:af:
                    5d:c3:42:39:07:59:04:8e:0f:3c:77:b6:39:4a:f4:
                    38:75:75:ca:13:1c:fe:e5:4f:e1:e8:07:66:17:53:
                    bb:3e:66:24:3e:b3:0b:74:28:b7:f8:f4:08:f7:a9:
                    1d:5f:3a:19:3e:f2:09:22:b8:b9:71:72:6f:e8:32:
                    48:9b:b6:00:92:e4:ff:32:ed:46:94:3b:36:89:c0:
                    3d:bf:a8:fb:32:9c:a7:9b:2b:67:e3:92:d3:a9:60:
                    0f:1e:b6:a8:93:50:03:b0:44:09:c4:26:e2:39:b2:
                    69:bd:48:26:3e:c2:b2:1f:77:d1:e6:36:75:8a:c3:
                    d6:77:5b:60:d1:c0:8c:e3:18:ec:27:f3:ed:3c:70:
                    bc:22:44:8d:3c:4f:0a:aa:88:95:5f:d8:8b:07:c3:
                    9f:cb:20:5b:05:99:a6:c0:bd:6b:e9:65:1d:3c:a7:
                    52:f7:f9:d7:c0:36:15:c3:ab:ec:f6:c8:67:6b:ab:
                    1e:ee:b8:8c:0e:72:2c:b9:7b:a8:53:41:f3:8a:f4:
                    c2:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage:
                TLS Web Server Authentication
            X509v3 Authority Key Identifier:
                4F:7E:67:80:89:3E:20:91:33:89:A4:B2:15:6D:5C:F3:2A:A8:25:E0
            X509v3 Subject Alternative Name:
                DNS:localhost, IP Address:127.0.0.1, IP Address:192.168.0.170, IP Address:192.168.0.171
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        3c:b5:13:84:93:23:10:e6:40:a4:14:83:e2:b9:3a:56:ac:c9:
        41:75:b5:1a:b2:37:1f:05:f8:90:b9:4d:1e:e1:8b:6d:8e:4e:
        6b:14:e5:09:3b:db:4a:c9:e9:d3:c5:25:74:28:9f:ca:4a:e7:
        f8:da:4c:d9:0f:d8:a6:71:a9:69:0e:af:f2:35:80:7a:37:9d:
        68:87:1f:a3:a0:bc:c6:8b:c9:89:e3:fb:33:aa:b3:3f:33:e2:
        6d:83:7e:31:6c:c7:57:45:6d:05:ec:26:20:ab:d5:83:7c:f0:
        7e:ef:e3:b8:4b:9f:a4:1e:c2:ec:f6:ea:05:7e:b7:0f:89:ca:
        78:6e:c0:a4:6a:9a:ab:09:80:33:51:24:04:eb:47:74:11:a4:
        77:49:62:af:18:91:77:a5:34:ee:a1:c4:08:84:6d:27:57:4f:
        ba:6a:88:c3:40:cb:ea:81:7a:6d:14:45:3a:c8:5e:2d:89:14:
        69:47:b0:b7:ad:a6:61:f7:80:0b:07:4a:4d:f6:c5:7b:99:61:
        5c:4d:ab:33:54:aa:d4:87:cd:ae:c9:7f:36:0f:bd:2a:2f:51:
        17:4b:a2:2f:78:80:f6:6e:40:09:cc:c1:56:a4:44:b6:ec:19:
        38:56:ed:33:e1:fb:f4:9a:08:92:2a:78:82:67:d4:f3:8e:75:
        01:7c:4c:21:88:f5:7c:60:32:5a:82:af:8b:cc:81:b8:b5:04:
        98:89:de:ee:12:ed:12:cf:13:d6:de:09:c0:fb:04:dd:bf:90:
        40:3d:cd:5c:95:29:69:ee:44:13:c3:1b:c2:18:69:05:40:7d:
        a1:de:ca:72:fe:ad:d2:91:25:6e:7a:57:6b:c6:d3:87:1c:c8:
        30:a9:34:3a:30:db:64:11:e2:78:85:60:50:2d:65:7c:be:4e:
        27:05:73:fe:18:8d:5e:a9:57:8a:ee:05:a4:3e:da:9f:50:eb:
        5b:80:9a:de:74:7e:a0:26:a3:f1:d6:94:a1:8c:e3:0e:5e:85:
        fc:08:72:65:b4:19

参考
使用 mkcert 解决 局域网IIS 网页 SSL 证书问题 https://www.cnblogs.com/googlegis/p/14976720.html
使用 mkcert生成ssl证书+nginx部署局域网内的https服务访问问题 https://blog.csdn.net/m0_62317155/article/details/137210539