Openssl ca

Sample minimal CA application

• openssl ca -config .../...
• openssl ca -create_serial -batch .../...

openssl ca -config intermediate/your_file.cnf -create_serial -batch -in intermediate/csr/subdomain.domain-example.com.csr -out intermediate/certs/subdomain.domain-example.com.cert.pem
Using configuration from intermediate/your_file.cnf
Enter pass phrase for /root/ca/intermediate/private/intermediate.key.pem:
Check that the request matches the signature
Signature ok
The Subject's Distinguished Name is as follows
commonName            :ASN.1 12:'subdomain.domain-example.com'
Certificate is to be certified until Mar  4 09:21:05 2022 GMT (365 days)

Write out database with 1 new entries
Data Base Updated

Related terms

• openssl verify
• openssl genrsa
• .pem

See also

• openssl [ rand | s_client | passwd | openssl req | openssl rsa | openssl genrsa | openssl x509 | openssl ca | openssl verify | openssl ec | openssl dgst | openssl pkcs12 | openssl asn1parse | openssl help | .cer to .pem, openssl version
• OpenSSL: RSA, ECDSA, WolfSSL, AES, Diffie-Hellman (DH) key-exchange, /etc/ssl/openssl.cnf, OpenSSL v3
• CA, FreeIPA, PKI, OpenCA, Wildcard certificate, certtool, certbot (Let's Encrypt), certinfo (Cloudflare), ACME, Boulder, cfssl (Cloudflare), Public key certificate, public key, TLS and X.509, OCSP, Subject Alternative Name (SAN), openssl ca, Self signed certificate, CSR, keytool, ACM, KMS, aws acm, IdenTrust, multirootca, cert-manager