Do you have to generate more than a few ssl certificates as part of your day-to-day job? Would you like to script it? I have a script for you. This PowerShell script has proven itself very indispensable when we had to replace all of our sha1 certificates. (Thanks Google!) I hope you find this script useful and if you do, please leave feedback.
Note: You can always modify the script to accept a list of fully qualified domain names if you need to produce a large quantity of certificates.