Can't remember the OpenSSL command to generate a private key & CSR? Me neither. Answer these questions, and you'll get a command to copy and paste into a shell. Nice!
A Sunday afternoon project by @patcable.
By the way: Most CAs will issue certificates with SubjectAlternativeNames that you specify during the request process. If this isn't how your CA works, you'll need to use something else.