ezgh private-ca ca csr

Print an external subordinate's CSR, for your root to sign.

Updated Oct 14, 2026View as Markdown

ezgh private-ca ca csr <ca>

Print the certificate signing request of a subordinate created with --external, as PEM, for your own root to sign as a CA certificate (basicConstraints CA:TRUE, keyCertSign and cRLSign, keeping its subject). Then import the result with ezgh private-ca ca import.

Part of ezgh private-ca ca.

Examples

ezgh private-ca ca csr corp-issuing > corp-issuing.csr

Flags

This command also takes the global flags.