Comment 3 for bug 398366

This info might help. this is what TinyCA uses to create the server cert:

/usr/bin/openssl ca -batch -passin env:SSLPASS -notext -config /home/quentusrex/.TinyCA/testing/openssl.cnf -name server_ca -in "/home/quentusrex/.TinyCA/testing/req/dGVzdDp0ZXN0QHRlc3QuY29tOnRlc3Q6dGVzdDpTZWF0dGxlOldhc2hpbmd0b246VVM=.pem" -days 365 -preserveDN -md sha1

Using configuration from /home/quentusrex/.TinyCA/testing/openssl.cnf
Check that the request matches the signature
Signature ok
The Subject's Distinguished Name is as follows
countryName :PRINTABLE:'US'
stateOrProvinceName :PRINTABLE:'Washington'
localityName :PRINTABLE:'Seattle'
organizationName :PRINTABLE:'test'
organizationalUnitName:PRINTABLE:'test'
commonName :PRINTABLE:'test'
emailAddress :IA5STRING:'<email address hidden>'
Certificate is to be certified until Jul 12 08:31:40 2010 GMT (365 days)

Write out database with 1 new entries
Data Base Updated
-----BEGIN CERTIFICATE-----
MIIFwjCCBSugAwIBAgIBAzANBgkqhkiG9w0BAQUFADCBrzELMAkGA1UEBhMCVVMx
EzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1NlYXR0bGUxHTAbBgNVBAoT
FFF1ZW50dXMgVGVjaG5vbG9naWVzMRwwGgYDVQQLExNJbmZvcm1hdGlvbiBTeXN0
ZW1zMRAwDgYDVQQDEwdxdWVudHVzMSowKAYJKoZIhvcNAQkBFht3aWxsaWFta2lu
Z0BxdWVudHVzdGVjaC5jb20wHhcNMDkwNzEyMDgzMTQwWhcNMTAwNzEyMDgzMTQw
WjB/MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMH
U2VhdHRsZTENMAsGA1UEChMEdGVzdDENMAsGA1UECxMEdGVzdDENMAsGA1UEAxME
dGVzdDEcMBoGCSqGSIb3DQEJARYNdGVzdEB0ZXN0LmNvbTCCAiIwDQYJKoZIhvcN
AQEBBQADggIPADCCAgoCggIBAKkqYIUc5LtOak5DLfbKlfZ8d/PQVHvlZVAtyJ6b
ZQwBUgLiMoeDTF/bB2Xsg8mUG4taye9+0Z2BON5eEZPIxS3oATVQLrQn5XJKGYtv
XNYr1E57iFNcbvbLrEfhTwTDUxNQDWlGCHdKTygAM9N63VLGLcvSCWHSbR5jwGOw
ZgedsITYz7GF0vwbE0pJU5ko8Z5fH+G83Bwcn8X2P+Up60l3r1x2tXJiKTl+/muK
hr4mTryM8SR0rcZlrZKQDtAe6YpnyZHEfRDoLY1JMCbkcKZ3G3M1BEk/IWePKdLh
IAXCLSFRpgjtkW4VCKesbiF9eAqAXueeb83EbxEafq5NmskLUeGesq6bwO1bL2Wp
A4BzKVMu9zLc/izIXDFp4uR/9Go8iA0g94V+DPx6DcqHcKlzp7+X/UhA7pHJkYF5
WjZETnJtMjVq8vhU9p+i8RlyNn9PTKiwRHC9/BotKnj2mnSuxBJdNUrMp2HLuD1E
SK6s6HboJShM2SE7hJzC3A18XhWHQvctZE9qfU1U02SaWjemc1ZNLo7x8SnprMkA
Wc6SN33qWS3pgsdODjyzn6OPE0lQq/IvSKF7fJThRY7q21O2CVHe4plaDx2oTkE8
vi9klZXaYU5l4DJ/CSLn9PxJpA7bNvvf5aHmbwgYMoSiLxcJrl5WyXOyg1coLlP9
VzXHAgMBAAGjggGXMIIBkzAJBgNVHRMEAjAAMBEGCWCGSAGG+EIBAQQEAwIGQDAr
BglghkgBhvhCAQ0EHhYcVGlueUNBIEdlbmVyYXRlZCBDZXJ0aWZpY2F0ZTAdBgNV
HQ4EFgQU/FztqMO4xXvct+ZmrKZsWw31T2QwgeQGA1UdIwSB3DCB2YAUkgd/OzdG
JLV3lpg3DN+32mXRK1OhgbWkgbIwga8xCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpX
YXNoaW5ndG9uMRAwDgYDVQQHEwdTZWF0dGxlMR0wGwYDVQQKExRRdWVudHVzIFRl
Y2hub2xvZ2llczEcMBoGA1UECxMTSW5mb3JtYXRpb24gU3lzdGVtczEQMA4GA1UE
AxMHcXVlbnR1czEqMCgGCSqGSIb3DQEJARYbd2lsbGlhbWtpbmdAcXVlbnR1c3Rl
Y2guY29tggkAwGVoUxJQA3YwJgYDVR0SBB8wHYEbd2lsbGlhbWtpbmdAcXVlbnR1
c3RlY2guY29tMBgGA1UdEQQRMA+BDXRlc3RAdGVzdC5jb20wDQYJKoZIhvcNAQEF
BQADgYEAc+OmIJlrOwfAEbTITZhyngjHMkome/8JwBN207RCJQ5su/QdADgMKCjI
MEroblTngB32rpFeR2WJJ8kBQJWYMJFHShwPv4/aWvpxfj/WaV84yPI62IKnTBOv
qcGXGLr/PX0yvFfgqP5BQb0Rga0HfpXDvSud0PDx8Z9oswvTw4g=
-----END CERTIFICATE-----