Issuing SSL Server Certificate with OpenSSL - dogtagpki/pki GitHub Wiki
To issue an SSL Server Certificate with an existing CA certificate and key:
$ openssl x509 \
-req \
-CA ca.crt \
-CAkey ca.key \
-CAcreateserial \
-in sslserver.csr \
-out sslserver.crt