Sorry ... didn't see the @Ken there and have been busy doing other stuff ... like living! :|
Anyhoooo ... the command you used was one for a 'wildcard' cert ... can be used with any server within a FQDN. They have the same example shown in Entrust/Digicert (the only two commercial CA's with which I had to work).
Creates a pfx file that then can be restored to any server within that domain ... has to do with getting matching pairs ... crt and key. There's a pfx file converter that will gen the cert with a matching key for the server then one uses the .key file gen'd by that to setup on web server (normally, one generates the key and crs on the server using FQDN to submit to a CA. CA takes the crs and gens the crts that matches your key. key is always kept private.).
So no, would not use anything different for cert for a Moodle to run https - one has to do what the CA says. ;)
Like I said ... don't do LDAPS so will defer to Iñaki there for sure.
'spirit of sharing', Ken