Never mind. This helped: http://www.mail-archive.com/openssl-users@openssl.org/msg37839.html
On Mon, Jan 31, 2011 at 3:48 PM, Karthik Ravikanti < karthik.ravika...@gmail.com> wrote: > Hi, > > Using the command line tools I was able to create a CA, a certificate > request and a certificate signed by the CA. However, I also need to add the > Extended Key Usage field to the certificate. I used the -exfile and > -extensions options in x509 to no avail. > Help! > > Thanks, > Karthik >