localhost ~ # openssl req -newkey rsa:1024 -keyout cle-privee.key -out cle-publique.req
Generating a 1024 bit RSA private key
.....................++++++
.....++++++
writing new private key to 'cle-privee.key'
Enter PEM pass phrase:
Verifying - Enter PEM pass phrase:
-----
You are about to be asked to enter information that will be incorporated
into your certificate request.
What you are about to enter is what is called a Distinguished Name or a DN.
There are quite a few fields but you can leave some blank
For some fields there will be a default value,
If you enter '.', the field will be left blank.
-----
Country Name (2 letter code) [CA]:
State or Province Name (full name) [Québec]:
Locality Name (eg, city) [Charlemagne]:
Organization Name (eg, company) [DS]:
Organizational Unit Name (eg, section) []:
Common Name (eg, YOUR name) []:éè
Email Address []:

Please enter the following 'extra' attributes
to be sent with your certificate request
A challenge password []:
An optional company name []:
localhost ~ # openssl ca -in cle-publique.req -out certificat.pem
Using configuration from /etc/ssl/openssl.cnf
Enter pass phrase for /etc/ssl/metres.homelinux.com/private/cakey.pem:
Check that the request matches the signature
Signature ok
Certificate Details:
        Serial Number: 2 (0x2)
        Validity
            Not Before: Jun 23 20:03:46 2007 GMT
            Not After : Jun 22 20:03:46 2008 GMT
        Subject:
            countryName               = CA
            stateOrProvinceName       = Qu\E9bec
            organizationName          = DS
            commonName                = éè
        X509v3 extensions:
            X509v3 Basic Constraints:
                CA:FALSE
            Netscape Comment:
                OpenSSL Generated Certificate
            X509v3 Subject Key Identifier:
                C3:7E:FC:69:47:71:16:12:F9:D9:85:FB:05:2A:4E:5B:C2:39:73:28
            X509v3 Authority Key Identifier:
                keyid:7A:AF:92:04:AF:49:8A:BB:85:AD:02:A4:3E:E6:91:67:B5:7D:4C:11

Certificate is to be certified until Jun 22 20:03:46 2008 GMT (365 days)
Sign the certificate? [y/n]:n
CERTIFICATE WILL NOT BE CERTIFIED