Command Line Example for Certificate Creation Using OpenSSL
OpenSSL is a commonly available tool which can be invoked by command line to create a certificate key-pair, basic example command line calls to this tool are provided here but the integrating party may well prefer to use another key generation tool.
A sample openssl command line which will produce a key-pair that conforms to the majority of the certificate policy settings shown above for mutual SSL usage against EXT follows:
Note: Please update the element tradeparty as applicable to the integrating party
openssl req -new -newkey rsa:2048 -nodes –sha256 \ -keyout extb2b.tsw.mutual.ssl.tradeparty.priv \ -out extb2b.tsw.mutual.ssl.tradeparty.csr \ -subj '/CN=extb2b.tsw.mutual.ssl.tradeparty/C=AsAbove/ST=AsAbove/L=AsAbove/O= AsAbove/OU=AsAbove/emailAddress=AsAbove'