A basic configuration. SetHandler csr # CsrRACertificate /tmp/ra-cert.pem # CsrRAKey /tmp/ra-key.pem CsrSubjectRequest O CsrSubjectRequest countryName CsrSubjectRequest stateOrProvinceName CsrSubjectRequest commonName CsrSubjectCGI OU UNIQUE_ID CsrSubjectSet OU "Test Certificate" CASimpleCertificate /etc/pki/certs/ca-cert.pem CASimpleKey /etc/pki/certs/ca-key.pem CASimpleSerialRandom on CASimpleTime on CADiskCertificateSignRequestPath /etc/pki/ca/ CADiskCertificateByTransactionPath /etc/pki/ca/