r proxy certificate as issuer. Note that this example uses a different configuration section for the proxy extensions:</p>

<pre><code>openssl req -new -config proxy.cnf \
    -out proxy2.req -keyout proxy2.key \
    -subj &quot;/DC=org/DC=openssl/DC=users/CN=proxy/CN=proxy 2&quot;

openssl x509 -req -CAcreateserial -in proxy2.req -out proxy2.crt \
    -CA proxy.crt -CAkey proxy.key -days 7 \
    -extfile proxy.cnf -extensions proxy_2</code></pre>

<h2 id="Using-proxy-certs-in-applications">Using proxy cert