#!/bin/sh

certutil -R \
 -d nssdb \
 -h internal \
 -f nssdb/password.txt \
 -z nssdb/noise.bin \
 -s "CN=Audit Signing Certificate,OU=pki-tomcat,O=EXAMPLE" \
 -o audit_signing.csr.der

openssl req -inform der -in audit_signing.csr.der -out audit_signing.csr

#BtoA audit_signing.csr.der audit_signing.csr.pem
#echo "-----BEGIN NEW CERTIFICATE REQUEST-----" > audit_signing.csr
#cat audit_signing.csr.pem >> audit_signing.csr
#echo "-----END NEW CERTIFICATE REQUEST-----" >> audit_signing.csr

rm audit_signing.csr.der
#rm audit_signing.csr.pem

openssl req -text -noout -in audit_signing.csr