Page History

...

• Explanations are similar to Creating self-signed Certificates with a few exceptions.
  • The -days option specifying the validity period of the CA Certificate should be longer than the validity period of individual certificates.
  • The -extfile option specifies the Basic Constraint CA:TRUE which is required for a CA Certificate. Key Usage is limited to signing certificates.
• The following files will be created with this step:
  • The signing-ca.crt file will hold the CA Certificate.

...