Issuing SSL Server Certificate with PKI CA

Enabling SAN Extension

See Configuring User Extension Policy.

Issuing Certificate

Submit the certificate request with the following command:

$ pki ca-cert-request-submit --profile caServerCert --csr-file sslserver.csr

Approve the request with the following command:

$ pki -n caadmin ca-cert-request-review <request ID> --action approve

Retrieve the certificate with the following command:

$ pki ca-cert-export <certificate ID> --output-file sslserver.crt

or the following command in older PKI versions:

$ pki ca-cert-show <certificate ID> --output sslserver.crt

See Also

• Generating System Certificates

• Generating SSL Server Certificate