On 01/08/2013 11:49 AM, Robert Moskowitz wrote: > Why was this chosen? Why is not -extensions v3_req used in the > certificate creation? Because it has to be able to sign itself?