Generate a certificate for a specific hostname and sign it with the root CA (generating a CSR can be skipped for simplification)
step certificate create hostname.example.com path/to/hostname.crt path/to/hostname.key --profile leaf --ca path/to/root-ca.crt --ca-key path/to/root-ca.key