106 • SSL Reference HP NonStop SSL Reference Manual
into your certificate request.
What you are about to enter is what is called a Distinguished Name or a DN.
There are quite a few fields but you can leave some blank
For some fields there will be a default value,
If you enter '.', the field will be left blank.
-----
Country Name (2 letter code) [US]:
State or Province Name (full name) [California]:
Locality Name (eg, city) []:
Organization Name (eg, company) [comForte Inc]:
Organizational Unit Name (eg, section) [Development]:
Common Name (eg, YOUR name) []:www.crs.com
Email Address []:
Please enter the following 'extra' attributes
to be sent with your certificate request
A challenge password []:
An optional company name []:
C:\Comforte\OpenSSL_certificates>openssl pkcs8 -topk8 -outform DER -in
server\servkey.pem -out server\servkey.der
Enter pass phrase for server\servkey.pem:
Enter Encryption Password:
Verifying - Enter Encryption Password:
Loading 'screen' into random state - done
C:\Comforte\OpenSSL_certificates>openssl ca -days 365 -policy policy_anything -keyfile
ca\cakey.pem
-cert ca\cacert.pem -in server\csr.pem -out server\servcert.pem
Using configuration from C:\OpenSSL-Win32\bin\openssl.cfg
Loading 'screen' into random state - done
Enter pass phrase for ca\cakey.pem:
Check that the request matches the signature
Signature ok
Certificate Details:
Serial Number: 1 (0x1)
Validity
Not Before: Oct 13 20:03:52 2011 GMT
Not After : Oct 12 20:03:52 2012 GMT
Subject:
countryName = US
stateOrProvinceName = California
organizationName = comForte Inc
organizationalUnitName = Development
commonName = www.crs.com
X509v3 extensions:
X509v3 Basic Constraints:
CA:FALSE
Netscape Comment:
OpenSSL Generated Certificate
X509v3 Subject Key Identifier:
F3:4A:8C:9A:B6:DA:D7:D6:03:3B:4A:24:D8:25:C9:5C:B8:7A:85:77
X509v3 Authority Key Identifier:
keyid:CE:DA:69:91:47:58:0E:FC:6B:57:A2:56:37:36:42:F5:DD:63:4C:8E
Certificate is to be certified until Oct 12 20:03:52 2012 GMT (365 days)
Sign the certificate? [y/n]:y
1 out of 1 certificate requests certified, commit? [y/n]y
Write out database with 1 new entries
Data Base Updated
C:\Comforte\OpenSSL_certificates>openssl x509 -inform PEM -outform DER -in
server\servcert.pem -out server\servcert.der
C:\Comforte\OpenSSL_certificates>