after I created a intermediate ca certificate, signed with my root ca, using openssl ...
(I used this commands:)
openssl req -new -nodes -keyout k