Revoking certificates and generating CRLs

Before revoking a certificate, we must issue it first. Let’s issue a sample certificate, similar to how we did so before:

1. As usual, the first step is to make a directory for the certificate files:

   $ cd mini-ca
   $ mkdir server2
   $ cd server2

2. Next, make the following certificate configuration and save it to the server2.cnf file:

   [req]
   prompt                  = no
   distinguished_name      = distinguished_name_server_cert
   [distinguished_name_server_cert]
   countryName             = NO
   stateOrProvinceName     = Oslo
   localityName            = Oslo
   organizationName        = TLS Experts
   commonName      ...