Self signed certificate for web ui

# openssl.cnf
extendedKeyUsage = serverAuth

…which gives…

X509v3 extensions:
    X509v3 Extended Key Usage: 
        TLS Web Server Authentication

…and in opnsense: Server: Yes