filosottile/mkcert ? reverse-engineered prompt

Build me a small command line tool that makes locally trusted development SSL certificates with almost no setup.

I want to be able to run something like an install command first, so it creates a local root CA and adds it to the machine trust store, plus Firefox if possible. Then I want to pass in one or more host names like example.com, localhost, 127.0.0.1, or even a wildcard, and get back a certificate and private key files that browsers will trust right away.

Please make it work on macOS, Linux, and Windows, and handle the common trust stores people actually use, including Firefox and Java when available. It should also support a few useful extras like custom output paths, ECDSA keys, PKCS12 output, client certificates, and using an existing CSR.

Keep it simple, with clear output messages and a good help screen. If you need to check current platform details or trust store behavior, look up the latest docs online first.