Create config file:

cat > openssl.cnf <<EOL
[req]
distinguished_name = req_distinguished_name
x509_extensions = v3_req
prompt = no

[req_distinguished_name]
CN = RedberrySelfSignedCert

[v3_req]
keyUsage = digitalSignature, keyEncipherment
extendedKeyUsage = serverAuth
subjectAltName = @alt_names

[alt_names]
DNS.1 = *.pre.ge
DNS.2 = pre.ge
DNS.3 = *.api.pre.ge
DNS.4 = *.web.pre.ge
EOL


Generate SSL:

openssl req -x509 -nodes -days 999 -newkey rsa:2048 -keyout wildcard.key -out wildcard.crt -config openssl.cnf


Then add to keychain in macos