# # Use with the following command # $ openssl req -new -x509 -outform DER -out self-signed-with-eku.pem \ # -newkey rsa -keyout self-signed-with-eku.key -nodes \ # -config with-eku.conf -set_serial 888 -extensions v3_ca # [ req ] default_bits = 1024 distinguished_name = req_distinguished_name x509_extensions = v3_ca dirstring_type = nobmp [ req_distinguished_name ] commonName = Common Name commonName_max = 64 [ v3_ca ] extendedKeyUsage=clientAuth,emailProtection,1.2.3.4