#!/bin/sh

certutil -R \
 -d nssdb \
 -h internal \
 -f nssdb/password.txt \
 -z nssdb/noise.bin \
 -s "CN=Subsystem Certificate,OU=pki-tomcat,O=EXAMPLE" \
 -o subsystem.csr.der

openssl req -inform der -in subsystem.csr.der -out subsystem.csr

#BtoA subsystem.csr.der subsystem.csr.pem
#echo "-----BEGIN NEW CERTIFICATE REQUEST-----" > subsystem.csr
#cat subsystem.csr.pem >> subsystem.csr
#echo "-----END NEW CERTIFICATE REQUEST-----" >> subsystem.csr

rm subsystem.csr.der
#rm subsystem.csr.pem

openssl req -text -noout -in subsystem.csr