openssl ca -spkac spkac.txt
openssl ca -in req.pem -out newcert.pem
openssl ca -in req.pem -extensions v3_ca -out newcert.pem
openssl ca -gencrl -out crl.pem
default_ca = CA_default # The default ca section
openssl ca -infiles req1.pem req2.pem req3.pem
