I've just had to generate a new self-signed X.509 certificate for an internal website at work, and I thought I'd generate a certificate with multiple names, so we can refer to it as "www.foo.org", and "foo.org", and "machine.foo.org", and all of the other variants that people are likely to generate.

It wasn't easy to find the exact incanctations needed, but for the record, here they are: