# gencert generates self-signed x509 with CA and IPs in SAN