iis – How to create a certificate with SAN and specific encryption in Windows?

I want to create a certificate with:

  1. Subject Alternative Name
  2. SHA256 as encryption

On a Windows 10 Ent machine, both the above options are not available by default when creating a certificate. Option for SAN doesn’t exist and the default cert is encrypted with SHA1.

How do I enable selection of these options in Windows?