Issuing Admin Certificate with PKI CLI

Jump to bottom

Endi S. Dewata edited this page Dec 3, 2020 · 3 revisions

Issuing a Certificate

To issue a certificate, prepare a certificate extension configuration in a file (e.g. admin.conf):

authorityKeyIdentifier = keyid:always
keyUsage               = critical, digitalSignature, nonRepudiation, keyEncipherment
extendedKeyUsage       = clientAuth, emailProtection

To issue a certificate signed by a CA certificate, specify the CA certificate nickname:

$ pki nss-cert-issue \
    --issuer ca_signing \
    --csr admin.csr \
    --ext admin.conf \
    --cert admin.crt

Availability: PKI 10.9

See Also

Tip	To find a page in the Wiki, enter the keywords in search field, press Enter, then click Wikis.

Clone this wiki locally