🔐 San Ramón CA — huaraz

Issue New Certificate (mkcert-sanramon.sh)

Wraps mkcert-sanramon.sh SERVER TYPE running on lima. Creates key, CSR, cert, fullchain, and P12 in /etc/ipsec.d/.

Used as filename base and CN prefix
Default 825 (Apple-compatible)
The script auto-adds DNS.1 = SERVER and DNS.2 = SERVER.sanramon. Add extras here only.
Runs on lima as rzighel — may take a few seconds