How to use OpenSSL to generate a valid self-signed certificate for Apache and Chrome 58+ without having NET::ERR_CERT_AUTHORITY_INVALID or NET::ERR_CERT_COMMON_NAME_INVALID warnings