baradhili

Since cacert.org's browser based client cert generator is broken - this is what I went through to manually do it..

Assuming you have openssl installed on your machine

Creating your private key
``openssl genrsa -out client.key.pem 4096``

Creating a csr
``openssl req -new -key client.key.pem -out client.csr``
It will ask you a bunch of x509 information - you need your actual name in the OU and your cacert email in the email field