fields but you can leave some blank

For some fields there will be a default value, If you enter '.', the field will be left blank.

Country Name (2 letter code) [CN]: State or Province Name (full name) [GuangDong]: Locality Name (eg, city) [GuangZhou]: Organization Name (eg, company) [ZJLH]: Organizational Unit Name (eg, section) [IT]: Common Name (eg, your name or your server's hostname) [zjlh.lan]: Email Address [admin@zjlh.lan]:

Please enter the following 'extra' attributes to be sent with your certificate request A challenge password []: An optional company name []:

kevin@kevin-TM1701:/gaoshi/zzxia-CA-openssl$ kevin@kevin-TM1701:/gaoshi/zzxia-CA-openssl$ openssl ca -in from_user_csr/${DOMAIN}.csr -out to_user_crt/${DOMAIN}.crt -extensions v3_req -config openssl.cnf--${DOMAIN} Using configuration from openssl.cnf--zjlh.lan Check that the request matches the signature Signature ok Certificate Details: Serial Number: 1 (0x1) Validity Not Before: Sep 26 05:41:47 2020 GMT Not After : Sep 26 05:41:47 2021 GMT Subject: countryName = CN stateOrProvinceName = GuangDong organizationName = ZJLH organizationalUnitName = IT commonName = zjlh.lan emailAddress = admin@zjlh.lan X509v3 extensions: X509v3 Basic Constraints: CA:FALSE X509v3 Key Usage: Digital Signature, Non Repudiation, Key Encipherment X509v3 Subject Alternative Name: DNS:zjlh.lan, DNS:*.zjlh.lan, DNS:docker-repo Certificate is to be certified until Sep 26 05:41:47 2021 GMT (365 days) Sign the certificate? [y/n]:y

1 out of 1 certificate requests certified, commit? [y/n]y Write out database with 1 new entries Data Base Updated kevin@kevin-TM1701:/gaoshi/zzxia-CA-openssl$ kevin@kevin-TM1701:/gaoshi/zzxia-CA-openssl$ openssl x509 -in to_user_crt/${DOMAIN}.crt -noout -text Certificate: Data: Version: 3 (0x2) Serial Number: 1 (0x1) Signature Algorithm: sha256WithRSAEncryption Issuer: C=CN, ST=GuangDong, L=GuangZhou, O=\xC3\xA7\xC2\x8C\xC2\xAA\xC3\xA7\xC2\x8C\xC2\xAA\xC3\xA4\xC2\xBE\xC2\xA0\xC3\xA9\xC2\x9B\xC2\x86\xC3\xA5\xC2\x9B\xC2\xA2, OU=IT, CN=zzxia-root-CA/emailAddress=kevinzu007@zzxia.vip Validity Not Before: Sep 26 05:41:47 2020 GMT Not After : Sep 26 05:41:47 2021 GMT Subject: C=CN, ST=GuangDong, O=ZJLH, OU=IT, CN=zjlh.lan/emailAddress=admin@zjlh.lan Subject Public Key Info: Public Key Algorithm: rsaEncryption Public-Key: (2048 bit) Modulus: 00:c8:a0:a8:ea:33:87:98:22:c2:83:ba:7e:a3:4b: 4e:b8:38:cb:21:32:fd:06:41:8d:2e:e9:2f:19:35: ...... fa:83:04:62:26:09:03:64:fc:0b:57:aa:36:ad:00: 3e:7d:08:cb:11:f2:c7:68:74:a7:78:aa:47:76:4f: 60:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: CA:FALSE X509v3 Key Usage: Digital Signature, Non Repudiation, Key Encipherment X509v3 Subject Alternative Name: DNS:zjlh.lan, DNS:*.zjlh.lan, DNS:docker-repo Signature Algorithm: sha256WithRSAEncryption 84:e1:d8:36:41:f7:b8:4f:3a:a1:e6:18:2a:50:8e:0b:24:7d: 9a:f6:7e:8d:ed:93:44:7a:d3:26:23:9d:36:f0:4f:d1:bb:ee: ...... 86:32:9e:88:fd:a9:5d:cc:e9:3c:55:be:e6:d9:9c:ae:fd:51: 38:da:ab:c2:4f:b9:d0:8f:df:49:89:94:03:f6:8e:45:64:9d: e9:93:75:4a:0a:29:45:96

### 2.5 Ошибка:
```bash
[root@localhost CA]# openssl ca -in server.csr -out server.crt
Using configuration from ./openssl.cnf
Check that the request matches the signature
Signature ok
The organizationName field needed to be the same in the
CA certificate (ZZXIA) and the request (ZJLH)

Если появилась вышеуказанная ошибка, то необходимо изменить файл openssl.cnf в разделе «[».