openssl x509 -req -in TheCSR.csr -CA ALITECS-CA256.crt -CAkey ALITECS-CA256.key -CAcreateserial -out NewCert.crt -days 3650
To sign with sha256 if not stated in the CSR:
openssl x509 -req -in TheCSR.csr -CA ALITECS-CA256.crt -CAkey ALITECS-CA256.key -CAcreateserial -out NewCert.crt -days 3650 -sha256
To sign with extensions for example add SAN:
openssl x509 -req -in TheCSR.csr -CA ALITECS-CA256.crt -CAkey ALITECS-CA256.key -CAcreateserial -out NewCert.crt -days 3650 -sha256 -extfile file
file
subjectAltName=@alt_section [alt_section] IP.1=127.0.0.1 DNS.1=FQDN
Related articles