How can I add a custom domain to an SAN for a certificate for consul domains like active.vault.service.consul?

Say one has a service provided by Consul, for which active.[name-of-service].service.consul is the link it provides to the active host leader for that service. How would I properly set up TLS to that .consul domain name?

For example, sup… Continue reading How can I add a custom domain to an SAN for a certificate for consul domains like active.vault.service.consul?