How to implement SSL for localhost?

Question

Digital certificates

I have nginx with local sites. I wanted to use http2, it is known that you will have to configure ssl.
I want to make my own certificate so that from any programs (curl, browser, etc.) you can open the site without warnings. Naturally, this is not about turning off the security check.
The lack of a 100% understanding of the work of ssl does not allow us to solve the problem. It seems that you can do it for 1 domain, you can do it for only a browser, you can also do it for a root one. But not all together.
Found a couple of helpful articles and answers:
Create a Self-Signed Certificate for Nginx in 5 Minutes
How To Create a Self-Signed SSL Certificate for Ng...
Adding a self-signed certificate to the “trusted list”
1. Is it possible to create your own certificate that does not affect sites on the Internet in any way (security), which can be applied to all local sites and localhost itself, as well as in all programs?
2. If yes, tell me the action plan.
ps Use only locally.

Answer 1

On localhost SSL is meaningless. What do you want to protect from being intercepted by yourself?
UPD: I take my words back, SSL can be useful for protecting against mixed content loaded from outside.
It is configured in the same way as any other certificate, for example, I set up obtaining a certificate from Let's Encrypt with authorization by domain name (I used the acmedns service and registered the necessary entries in CNAME), automated auto-renewal through the task scheduler. Of course, the domain name must be real in this case, "localhost" will not work (but no one bothers to configure the domain name so that it refers to 127.0.0.1).

Answer 2

There is no certificate binding to IP. There are a zillion instructions on how to issue a self-signed certificate for tests, you don’t even need to think much (although in general PKI is a huge topic and the more you do it, the more you fuck up as always :))