openssl x509 -req -in TheCSR.csr -CA ALITECS-CA256.crt -CAkey ALITECS-CA256.key -CAcreateserial -out NewCert.crt -days 3650

To sign with sha256 if not stated in the CSR:

openssl x509 -req -in TheCSR.csr -CA ALITECS-CA256.crt -CAkey ALITECS-CA256.key -CAcreateserial -out NewCert.crt -days 3650 -sha256

To sign with extensions for example add SAN:

openssl x509 -req -in TheCSR.csr -CA ALITECS-CA256.crt -CAkey ALITECS-CA256.key -CAcreateserial -out NewCert.crt -days 3650 -sha256 -extfile file
file
subjectAltName=@alt_section
[alt_section]
IP.1=127.0.0.1
DNS.1=FQDN