The MySQL Keyring Organization Name (eg, company) [Internet Widgits Pty Ltd]: Organizational Unit Name (eg, section) []: Common Name (e.g. server FQDN or YOUR name) []: Email Address []: [req] distinguished_name = vault x509_entensions = v3_req prompt = no [vault] C = US ST = CA L = RWC O = Company CN = 127.0.0.1 [v3_req] subjectAltName = @alternatives authorityKeyIdentifier = keyid,issuer basicConstraints = CA:TRUE [alternatives] IP = 127.0.0.1 Answer the prompts with appropriate values. To create a HashiCorp Vault server certificate, a Certificate Signing Request (CSR) must be prepared for the newly created server key. Create a configuration file named  request.conf  containing the following lines. If the HashiCorp Vault server does not run on the local host, substitute appropriate CN and IP values, and make any other changes required. 3. Create a certificate signing request. 4. Create the HashiCorp Vault server certificate. openssl x509 -req -in request.csr -CA company.crt -CAkey company.key -CAcreateserial -out vault.crt -days 365 -sha256 cat company.crt >> vault.crt -----BEGIN CERTIFICATE----- ...  content of HashiCorp Vault server certificate  ... -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- openssl req -new -key vault.key -config request.conf -out request.csr Use this command to create the signing request: The output file ( request.csr ) is an intermediate file that serves as input for creation of the server certificate. Sign the combined information from the HashiCorp Vault server key ( vault.key ) and the CSR ( request.csr ) with the company certificate ( company.crt ) to create the HashiCorp Vault server certificate ( vault.crt ). Use the following command to do this (enter the command on a single line): To make the  vault.crt  server certificate useful, append the contents of the  company.crt  company certificate to it. This is required so that the company certificate is delivered along with the server certificate in requests. If you display the contents of the  vault.crt  file, it should look like this: 1421