クライアント証明書を作成するには、先ほど作成したCA局において、 証明書を作成する必要があります。 まず、秘密鍵を作成します。 # openssl req -new -key client_private.pem -out newreq.pem You are about to be asked to enter information that will be incorporated into your certificate request. What you are about to enter is what is called a Distinguished Name or a DN. There are quite a few fields but you can leave some blank For some fields there will be a default