Generating a certificate for a web and email client

Generating a client certificate is similar to generating a server certificate:

1. As usual, we will make a separate directory for this certificate and change our current directory there:

   $ cd mini-ca
   $ mkdir client
   $ cd client

2. We will use the following configuration saved in the client.cnf file for generating the client certificate:

   [req]
   prompt                  = no
   distinguished_name      = distinguished_name_client_cert
   req_extensions          = v3_client_cert
   [distinguished_name_client_cert]
   countryName             = NO
   stateOrProvinceName     = Oslo
   localityName            = Oslo
   organizationName  ...