...
openssl req -new -config openssl.cnf -key client-2048.key -out client-2048.csr |
Select the Certificate signing requests tab and click New Request
Select the CA template and click the Apply Extensions button.
Click on the Subject tab and enter the name etc.
The key that you generated in the first step must be selected (if the key doesn't appear, check the "Used keys tootool" box.
)
Click on the Extensions tab
Ensure that certificate authority Certification Authority is selected as the type.
Equivalent Open SSL Command - Self-sign the certificate request to create a certificate
...