I think the mismatch is that CSR extensions are not carried over; they have to be added at signing time. See https://github.com/openssl/openssl/issues/10458
Re: Problems adding specific extensions to signed certificates
Salz, Rich via openssl-users Fri, 07 Feb 2020 08:16:52 -0800
- Problems adding specific extensions to signed... Michael Leone
- Re: Problems adding specific extensions ... Viktor Dukhovni
- Re: Problems adding specific extensi... Michael Leone
- Re: Problems adding specific extensi... Michael Leone
- Re: Problems adding specific ext... Sergio NNX
- Re: Problems adding specific... Michael Leone
- Re: Problems adding spe... Salz, Rich via openssl-users
- RE: Problems adding... Michael Wojcik
- Re: Problems ad... Michael Leone
- Re: Problems ad... Michael Leone
- RE: Problems ad... Michael Wojcik
- Re: Problems ad... Michael Leone
- RE: Problems ad... Michael Wojcik
- Re: Problems ad... Michael Leone
- Re: Problems adding specific extensions ... Michael Leone
- Re: Problems adding specific extensi... Michael Leone