.</p>

</dd>
<dt id="CAkey-filename-uri"><b>-CAkey</b> <i>filename</i>|<i>uri</i></dt>
<dd>

<p>Sets the &quot;CA&quot; private key to sign a certificate with. The private key must match the public key of the certificate given with <b>-CA</b>. If this option is not provided then the key must be present in the <b>-CA</b> input.</p>

</dd>
<dt id="not_before-date"><b>-not_before</b> <i>date</i></dt>
<dd>

<p>When <b>-x509</b> is in use this allows the start date to be explicitly set, otherwise it is ignored. 