cation to interpret and combine these policies.&gt;</p>

<p>With a proxy extension, creating a proxy certificate is a matter of two commands:</p>

<pre><code>openssl req -new -config proxy.cnf \
    -out proxy.req -keyout proxy.key \
    -subj &quot;/DC=org/DC=openssl/DC=users/CN=proxy&quot;

openssl x509 -req -CAcreateserial -in proxy.req -out proxy.crt \
    -CA user.crt -CAkey user.key -days 7 \
    -extfile proxy.cnf -extensions proxy</code></pre>

<p>You can also create a proxy certificate using anothe