How to generate a non-self-signed certificate

When generating a self-signed certificate, we used a generic approach instead of long combined commands. Therefore, the generation of non-self-signed certificates will be very similar. We will now generate a couple of non-self-signed certificates. We will use one as an intermediate CA certificate and another as an end-entity leaf certificate.

Let’s proceed with the certificate generation:

1. First, let’s generate a key pair for the intermediate CA certificate:

   $ openssl genpkey \
       -algorithm ED448 \
       -out intermediate_keypair.pem

2. Next, generate a CSR:

   $ openssl req \
       -new \
       -subj "/CN=Intermediate CA" \
       -addext "basicConstraints=critical,CA:TRUE" \
       -key intermediate_keypair.pem \
       -out intermediate_csr.pem

Note that we used...