The steps described in this section are based on the OpenSSL command-line utilities from the OpenSSL project. Further documentation of the OpenSSL command-line utilities can be obtained at http://www.openssl.org/docs.

For the purposes of illustration, the CA database is assumed to have the following directory structure:

Where X509CA is the parent directory of the CA database.