Mkcert is a simple tool that enables you to generate and install self-signed SSL certificates for local development. Here are the steps to install, configure, and generate self-signed SSL certificates with mkcert :

sudo apt install libnss3-tools
curl -JLO "https://dl.filippo.io/mkcert/latest?for=linux/amd64"
chmod +x mkcert-v*-linux-amd64
sudo cp mkcert-v*-linux-amd64 /usr/local/bin/mkcert

If you use a pfsense in your company, school …. with an active directory, nowadays Microsoft strongly recommends for a question of security, to encrypt your ldap connections. But since the version of PFSense 2.5.xx it is necessary to import the authoritative certificate of your LDAP. (An upcoming procedure to explain how to create an ADCS from your Active Directory). We will therefore proceed to my LAB demo which is HOME.LAN.