Openssl x509v3 Extended Key Usage
问题 I know you can specify the purpose for which a certificate public key can be used for by adding a line like this one in the openssl.cfg file: extendedKeyUsage=serverAuth,clientAuth But since I have several certificates to create, each with a different extended key usage, is it possible to specify which attribute I need in the command line (without using the openssl.cfg file)? Something like: openssl req -newkey rsa:4096 \ -extendedKeyUsage "serverAuth,clientAuth" \ -keyform PEM \ -keyout