Hmm, what I described above is how a client certificate signed by a certificate authority is created.

Random site that describes the procedure is below. What is the right way to do this?

    Exporting the private key of the certificate

    Enter the password of the private key, and then export the client key onto the generated client certificate using the following command:

    openssl pkcs12 -export -out client.pfx -inkey client.key -in client2.pem

http://publib.boulder.ibm.com/infocenter/tivihelp/v8r1/index...