In your ca_defualt you should have a x509_extensions field that references another stanza. That other stanza needs the copy. I don?t know if copy_extensions copies everything. ? -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://mta.openssl.org/pipermail/openssl-users/attachments/20160113/4b1208b4/attachment.html>