Generating Admin CSR with PKI NSS - dogtagpki/pki GitHub Wiki
To create a certificate request, prepare a certificate extension configuration (e.g. admin.conf):
authorityKeyIdentifier = keyid:always keyUsage = critical, digitalSignature, nonRepudiation, keyEncipherment extendedKeyUsage = clientAuth, emailProtection
Then execute the following command:
$ pki nss-cert-request \
--subject "CN=Administrator" \
--ext admin.conf \
--csr admin.csr
Availability: PKI 10.10