openssl x509 -req -in TheCSR.csr -CA ALITECS-CA256.crt -CAkey ALITECS-CA256.key -CAcreateserial -out NewCert.crt -days 3650

To sign with sha256 if not stated in the CSR:

openssl x509 -req -in TheCSR.csr -CA ALITECS-CA256.crt -CAkey ALITECS-CA256.key -CAcreateserial -out NewCert.crt -days 3650 -sha256

To sign with extensions for example add SAN:

openssl x509 -req -in TheCSR.csr -CA ALITECS-CA256.crt -CAkey ALITECS-CA256.key -CAcreateserial -out NewCert.crt -days 3650 -sha256 -extfile file
subjectAltName=@alt_section
[alt_section]
IP.1=127.0.0.1
DNS.1=FQDN

Related articles

Related articles appear here based on the labels you select. Click to edit the macro and add or change labels.

Related issues