emailAddress             = chiko@example.com

        X509v3 extensions:

            X509v3 Basic Constraints:

                CA:FALSE

            Netscape Comment:

                OpenSSL Generated Certificate

            X509v3 Subject Key Identifier:

                D9:F9:DB:F8:59:4C:72:86:15:13:B0:C0:FE:76:5C:93:C0:FD:38:B9

            X509v3 Authority Key Identifier:

                keyid:6B:2E:C8:03:71:2E:67:62:71:BF:A7:93:56:52:C2:FF:62:30BA:F0

                DirName:/C=RU/ST=KRAST/L=Achinsk/O=AGK/OU=SB/

`         CN=Pokhabov Aleksandr/emailAddress=chiko@example.com

                serial:00

Certificate is to be certified until Nov  4 09:48:50 2005 GMT (365 days)

Sign the certificate? [y/n]:y

1 out of 1 certificate requests certified, commit? [y/n]y

Write out database with 1 new entries

Data Base Updated

Signed certificate is in newcert.pem

Экспортируем наш закрытый ключ:

# openssl rsa -in newreq.pem -out newkey.pem

Enter pass phrase for newreq.pem:

writing RSA key

# /etc/ssl/misc/CA.pl -pkcs12

Enter pass phrase for newreq.pem:

Enter Export Password:

Verifying - Enter Export Password: