Create key & certificate > Key Root_CA > Certificate Root_CA > Template : CA >

apply ex > Extension : Time range :10 years

Select Key Root_CA & Certificate Root_CA > key & certificate > Key Sub_CA >
Certifcate Sub_CA > Template : CA > apply ex > Extension : Time range : 5 years

Select Key Sub_CA & Certificate Sub_CA > New key & New Certificate > Templates :
TLS server > time : 1 year

Export Certificate > pem.chain

Export certificate key > default (pem)
Export Root_CA certificate .crt

CMD in the exported folder

scp db.cdac.lab.pem user@debian_machine_IP:/tmp/

windows+r > certmgr.msc > Trusted > import Root_CA

Add a entry in host file > machine_IP website_name

Debian machine

apt-get install apache2

apt-get install openssl -y
apt-get install vim
apt-get install openssh-server -y
cd /var/www/html > rm index.html > vim index.html

mkdir /etc/apache2/ssl
mv db.cdac.lab* /etc/apache2/ssl
vim /etc/apache2/site-enabled/default-ssl.conf
Servername db.cdac.lab :443

Now give paths to first certificate

second key
systemctl restart apache2

http://machine_IP/