Issuing SSL Server Certificate with OpenSSL - dogtagpki/pki GitHub Wiki
To issue an SSL Server Certificate with an existing CA certificate and key:
$ openssl x509 \ -req \ -CA ca.crt \ -CAkey ca.key \ -CAcreateserial \ -in sslserver.csr \ -out sslserver.crt