OpenSSL # 3 – Creating A Certificate Authority

Create the root CA private key
openssl genrsa -out LABROOTCA-Private.key 4096

View Contents of the private key

openssl rsa -in LABROOTCA-Private.key

-----BEGIN PRIVATE KEY-----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-----END PRIVATE KEY-----

openssl rsa -in LABROOTCA-Private.key

openssl rsa -in LABROOTCA-Private.key -noout -text

Private-Key: (4096 bit, 2 primes)
modulus:
    00:d2:48:ce:e8:63:2d:6a:45:7b:e1:6d:cc:f3:10:
    06:41:67:f2:62:14:bd:a9:bb:42:f9:ed:da:b5:e6:
    4b:80:1e:d0:e1:73:4e:da:8c:f6:ff:b3:a5:36:21:
    4d:f7:d9:92:12:69:7a:b7:d2:6f:46:db:e6:89:69:
    b7:fd:4f:30:d1:86:00:39:49:89:d3:3a:93:57:06:
    a6:0f:5c:4a:c8:21:bc:49:9e:12:95:20:db:22:2a:
    ea:ff:d5:6e:64:ab:16:be:bc:92:ef:ad:db:10:43:
    4d:e9:b9:c5:f5:27:00:ca:2e:d5:1b:12:0d:f4:a3:
    8b:4a:e6:13:0c:5f:21:70:0a:ae:f2:6a:1a:f7:26:
    97:d7:dc:f3:47:5d:93:4c:52:07:81:61:6d:38:f5:
    47:ae:0d:fd:b6:17:c1:7c:bb:03:58:ee:de:eb:09:
    09:ed:ff:f9:65:d9:e3:f4:37:9b:11:54:24:eb:65:
    b7:15:bc:99:2b:d0:3e:12:36:68:66:70:9e:dc:c3:
    ce:94:36:d7:32:c7:a1:04:46:00:52:77:06:c2:e9:
    94:3a:24:4b:be:2c:29:8a:b4:03:ee:72:72:de:1b:
    b9:0d:04:e0:68:84:7b:19:32:d0:74:95:3b:07:24:
    cc:e3:a7:ed:ba:e3:fb:f9:be:99:86:0f:64:96:ee:
    33:1d:1b:cf:65:b6:da:4f:25:d1:dd:23:f0:08:a6:
    56:cc:d4:0d:cc:c2:55:0f:4e:69:da:43:44:b8:8b:
    55:9d:2f:9a:a1:56:9f:4d:51:db:14:bb:34:c2:80:
    cc:f1:ab:2a:ec:2f:ce:05:cf:8b:b5:e5:36:d7:37:
    fe:a5:5f:96:14:9c:a2:68:46:70:fa:b2:04:7a:24:
    8e:b2:cf:23:71:a3:b3:7c:e1:5c:d1:bc:a5:de:64:
    7d:d9:16:c9:4a:22:81:1b:f2:bf:29:e8:f3:ff:f2:
    0f:57:b1:d9:e0:50:f4:a7:67:d9:24:cd:c5:60:a2:
    0b:8b:d9:6e:ce:cf:45:81:38:33:65:a0:a6:1e:d2:
    b6:ff:3c:81:2d:7e:16:6d:be:b9:22:5b:f0:80:d2:
    f7:85:9f:a6:a7:0d:05:53:2a:95:33:b1:6c:7a:11:
    b6:81:4c:f4:09:6f:9a:1c:31:f2:c8:f4:de:ac:52:
    8e:45:b3:9e:b5:a0:e5:b0:bb:27:80:9c:5d:52:89:
    13:6d:6e:5d:66:8a:f4:9b:4f:92:ce:e6:cc:51:f7:
    65:7a:d3:e5:d1:ae:15:e7:1f:1e:48:67:f1:03:55:
    5f:56:1d:92:52:85:fc:88:f2:be:51:ca:90:95:e1:
    09:f6:a5:7e:42:08:f3:8e:d5:ac:03:fb:92:31:16:
    bd:21:ad
publicExponent: 65537 (0x10001)
privateExponent:
    13:7b:d0:01:fb:a8:7a:53:80:50:29:8c:87:0b:d9:
    cc:87:1d:4f:e5:a4:92:1c:a9:ee:be:d1:58:2f:c3:
    98:96:22:5b:f5:43:5d:e0:18:45:a6:67:3d:1d:f6:
    5b:ab:d2:cb:36:6f:3a:a7:7a:8c:79:f5:01:0f:e4:
    ce:89:5f:18:56:be:60:10:76:7e:f6:0b:2f:51:cc:
    22:99:b6:4b:17:47:1b:1a:14:96:31:32:64:96:cd:
    e9:d0:e4:76:da:dc:53:65:65:06:e4:98:aa:c7:d5:
    a8:fd:7f:c0:40:72:24:09:95:50:ba:0a:45:7b:be:
    bc:fc:96:d0:bb:62:bd:7f:1b:e9:15:98:34:84:a4:
    a6:89:50:18:31:6d:23:b1:e9:04:9d:9a:91:5f:b6:
    99:c3:ad:99:88:d7:72:5f:60:86:c5:b1:2d:5d:4b:
    c8:7b:c2:67:a3:b9:e9:87:9a:6c:4f:5b:d1:5c:be:
    0b:3b:4b:84:e1:f9:52:56:2c:b3:ab:25:29:06:d2:
    75:ec:a3:e1:4e:5a:56:ab:46:bd:dd:4d:e8:d2:dc:
    1b:4c:00:21:99:75:6a:e6:d5:83:6b:22:c5:fe:13:
    16:07:f8:e3:ee:3c:7a:9f:f8:ed:08:63:ac:fc:85:
    a8:65:47:93:5c:aa:dc:df:c2:59:47:c5:55:ef:b1:
    98:0a:93:69:c4:57:15:83:f6:ea:bb:41:a4:c1:a0:
    c8:b3:42:46:c1:51:12:80:fe:dd:1e:a2:73:3f:02:
    8c:f0:e7:c4:3e:50:d1:1b:d1:00:43:ac:b3:61:72:
    cd:75:3a:66:dc:52:d7:f4:73:a3:42:22:a1:83:80:
    40:cb:d7:87:01:f3:8a:a3:41:5b:47:30:a7:a3:e4:
    9f:f2:ed:c8:cc:c4:ae:07:a4:1b:61:30:47:83:62:
    71:0b:33:f8:7b:59:06:cc:87:83:ba:ad:d3:b6:b5:
    2f:1c:98:37:91:88:c8:80:01:6a:e1:15:89:5d:e1:
    c2:89:37:6b:da:c8:bc:51:ed:62:c7:31:a5:5b:be:
    28:c4:19:1a:e5:61:24:3b:6d:60:78:66:5f:64:50:
    5a:95:a6:37:72:ee:0e:6c:70:9a:ad:bd:05:96:a8:
    86:70:d4:c8:a6:bf:65:2c:96:50:93:44:86:ef:56:
    62:ee:05:71:37:19:6c:20:cd:ef:3a:0e:88:b4:08:
    75:ee:bd:a0:aa:c1:02:1b:8e:f9:47:5a:a0:fe:89:
    4f:5e:9f:ce:a2:f6:6e:e5:2c:02:7a:cf:13:ca:0d:
    f8:59:92:cf:25:62:b8:55:61:e3:23:9f:13:6d:c4:
    74:98:78:91:00:32:92:55:60:a3:29:17:67:ac:e1:
    54:01
prime1:
    00:f1:5e:6e:1e:12:f5:12:cc:9d:af:65:44:9e:21:
    f4:6a:34:56:a0:ab:ab:c0:fa:0a:f4:16:e3:cf:44:
    2b:34:bd:8d:cf:40:4d:b4:29:55:4c:6d:5a:19:be:
    ad:e7:a5:80:26:31:32:3c:78:ef:80:00:f1:d0:de:
    f3:c7:e6:2e:28:fe:16:fa:37:a5:4e:f4:29:b1:91:
    d9:3a:31:94:c0:c1:a0:c3:a1:10:72:ff:33:07:64:
    a1:f3:6a:29:55:61:af:05:b3:b7:42:af:7c:36:9a:
    3a:43:4e:ad:07:4a:cc:d0:09:a0:07:f7:f0:0c:c8:
    7e:53:5f:23:54:7f:59:82:2d:f8:c0:7d:ad:d5:99:
    d9:e5:1d:5a:ed:e3:92:c2:42:ea:a6:bd:bb:f0:68:
    14:39:d5:7a:63:a1:8c:c1:f5:fe:25:dd:ad:e3:6f:
    5f:fa:b9:1e:17:18:20:62:16:59:f1:10:b0:1a:ab:
    9a:c8:23:ef:fc:8a:b0:84:eb:f7:40:4a:03:38:d2:
    43:df:5d:6a:d8:68:00:e5:e2:4a:8f:3e:b3:70:27:
    bb:94:ab:a1:21:5c:cf:99:b6:35:09:49:d7:8e:8f:
    cf:6a:20:33:ad:a4:27:6f:37:a4:78:dd:0e:46:b8:
    11:99:32:e0:f8:0a:2e:ff:43:54:49:9b:fb:73:13:
    7c:01
prime2:
    00:df:08:02:28:50:b8:f6:2d:11:bf:61:2a:31:64:
    e1:da:f3:d7:83:cd:f8:28:fc:eb:f2:24:46:c6:c3:
    97:14:eb:6c:d6:d3:e5:e7:67:9b:97:15:9c:45:de:
    6d:c0:b9:38:9d:7a:08:96:69:18:e3:96:39:20:02:
    eb:0f:d0:ea:c3:6c:fa:e9:77:7c:2b:d9:4b:1a:7e:
    cd:19:b9:aa:70:e7:d0:3c:1f:d1:8c:71:fe:66:42:
    6b:15:1f:09:e5:3f:75:cc:4e:3a:33:71:fa:1f:b1:
    df:aa:ec:33:8a:67:a6:fa:6c:8b:71:ba:ff:4e:25:
    17:7e:ca:63:99:b1:a1:3c:ee:8e:50:9c:1a:35:88:
    4a:e7:9c:5b:a4:d8:2d:5f:5c:b9:ec:e0:3b:04:67:
    55:3c:41:b6:b9:ea:75:48:cd:1d:85:6a:4b:91:30:
    49:4d:f6:6e:c9:1f:7e:33:30:2a:45:69:06:e6:99:
    90:2f:33:ef:58:97:06:91:7b:ab:6c:ac:d2:23:fd:
    c0:65:1f:7a:d7:ed:24:80:79:18:63:fe:76:d6:d3:
    16:b8:19:a9:dc:84:3b:01:08:02:8e:52:67:fc:11:
    4f:0c:9a:f9:4e:09:a9:2b:51:f4:cf:56:2a:9e:00:
    ce:c2:72:35:73:b5:4b:d0:6c:6f:d5:f1:13:72:66:
    55:ad
exponent1:
    00:ed:13:16:4f:dd:c8:ef:bd:20:c8:ad:4c:17:92:
    3c:52:b0:b3:c1:be:bc:c5:a0:13:70:2a:a7:79:e6:
    78:15:a6:75:8a:72:9b:9f:f0:d5:42:6b:4a:0b:6d:
    79:bc:c4:97:39:6c:2a:ee:b0:ce:75:48:f8:3b:73:
    31:b9:4f:c2:59:2b:31:80:75:75:9e:36:3e:59:96:
    6a:ea:38:d6:e5:f9:89:a1:7d:2a:fd:f8:e1:b3:4a:
    49:b4:1f:bb:17:8d:09:ef:2c:d5:3c:df:c6:be:8e:
    ff:d9:2a:86:d3:59:ca:10:30:d4:09:df:a2:dd:bb:
    74:31:09:8a:57:2d:7a:ca:5d:c3:2d:b6:84:2f:00:
    9d:bf:e7:f4:6f:22:8e:fc:d5:e3:4b:01:a3:7e:7f:
    8c:16:3e:33:a7:76:7f:1d:e8:33:c8:17:93:fb:87:
    62:9b:8e:86:1a:a2:ec:f3:cb:06:6e:bc:38:6d:09:
    ce:ce:f4:55:7d:14:f0:4a:ae:c6:bd:53:b5:14:73:
    9a:8c:e3:61:d5:cb:59:ce:72:55:4f:9b:83:7e:0e:
    d8:b5:2f:5a:e5:bd:16:7f:e1:32:f8:bb:99:c9:02:
    41:f4:f8:4a:2a:2c:c9:3a:f9:49:48:19:c0:33:00:
    0a:f1:11:c3:5c:7e:0c:29:57:85:8b:83:75:18:53:
    b4:01
exponent2:
    00:90:31:ba:4b:5c:5d:28:f3:dc:8c:92:02:58:6a:
    f3:c6:be:6d:f0:ce:42:8a:25:73:5a:5a:ef:d3:63:
    f3:12:d8:5e:c6:c9:ba:d3:10:5e:3c:a1:01:26:fe:
    f6:90:6a:6f:db:08:61:f2:f4:c1:dd:aa:6b:06:72:
    3c:8d:3e:31:f9:e5:44:97:9a:e3:91:e9:eb:af:96:
    99:7d:ef:56:ed:a6:42:30:0d:16:4a:aa:0c:a3:0a:
    7f:f6:e8:d9:59:f8:dc:6d:19:8a:71:66:58:23:13:
    ba:1a:e4:99:31:fb:6f:ae:6a:6d:01:3b:b8:02:4a:
    e2:d4:db:7e:e7:88:3b:49:8c:a6:40:21:9c:a4:4d:
    98:b8:03:94:10:90:9f:4d:0f:43:39:8d:83:3a:86:
    a0:49:d3:e6:92:6e:ae:23:42:51:ba:c7:0d:52:32:
    18:c2:a9:f7:d8:5a:5f:1a:33:22:b1:3b:84:f5:a4:
    04:df:2f:c1:a7:d2:04:b2:1c:75:a9:4e:56:92:64:
    65:76:3b:93:0d:75:49:6b:32:5f:7d:8e:b0:40:95:
    bb:13:8d:ac:0f:61:02:50:d9:5f:e5:aa:0b:86:a1:
    9e:2c:f5:29:07:b6:21:44:5b:b9:5e:2f:44:60:60:
    ff:4c:21:d0:c3:1d:4c:85:d5:05:bd:19:1e:cc:90:
    b3:05
coefficient:
    34:45:6a:23:b9:05:8e:2c:34:72:96:f4:81:38:85:
    bd:d4:6b:71:89:41:c7:f5:41:7f:ec:a5:cd:b3:85:
    d0:4c:e7:23:61:66:c7:53:8e:6b:62:94:15:61:bc:
    3d:36:5d:ef:18:9a:d8:99:67:0c:17:85:ca:e3:ad:
    6b:f3:8c:3f:f5:d0:b3:15:75:38:e1:4b:67:98:c2:
    90:1f:51:91:5d:d9:6d:d8:d2:53:8a:ad:06:96:fd:
    15:45:b2:fc:7c:77:05:6a:18:bf:d1:53:fc:5f:44:
    09:88:69:9e:4e:c5:06:1d:46:8c:02:1e:9c:bd:03:
    f9:78:36:70:df:2b:f7:10:d2:d1:03:b2:e5:62:60:
    72:25:99:8c:d1:71:18:74:e3:b8:15:70:c0:9f:fb:
    a6:53:16:39:d1:82:ad:72:5b:ac:60:35:f9:b4:0e:
    2b:95:05:5a:e8:61:0c:1d:99:48:87:e1:15:a3:fa:
    2f:b2:78:fe:c3:d4:68:04:70:a0:51:7a:14:c7:52:
    fa:df:96:c7:f9:8e:6b:d2:a3:f0:b8:fa:f2:36:c4:
    4c:3c:9e:e9:8f:ca:0d:9d:92:88:5a:be:25:15:87:
    1d:2e:d4:1c:0d:e2:ea:b2:fb:86:f9:96:26:c5:55:
    b2:ac:5e:b3:79:6b:3c:7c:79:5a:a1:61:05:ad:46:
    e2

Generate the CSR
openssl req -new -x509 -days 7300 -sha256 -key LABROOTCA-Private.key -out LABROOTCA-CSR.cert

Viewing the certificate

openssl x509 -in LABROOTCA-CSR.cert -noout -text

Generate the device CSR
openssl ca -config  RootCA.conf -cert LABROOTCA-CSR.cert -keyfile LABROOTCA-Private.key -in server01.securewlanmsp-csr.csr -out server01.securewlanmsp-cert

Leave a Reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.