// and a client kesy
var clientKey as String = OpenSSLMBS.GeneratePrivateKey
Var pclientKey As PKeyMBS = PKeyMBS.Open(clientKey)

// and we request a client certificate
Var clientCertFields As New Dictionary
clientCertFields.Value("C") = "US"
clientCertFields.Value("O") = "Client Org"
clientCertFields.Value("CN") = "Client Company"
var clientCSR as String = pclientKey.GenerateCertificateSigningRequest(clientCertFields)

break

// we need a root key
Var RootKey As String = OpenSSLMBS.GeneratePrivateKey
Var pRootKey As PKeyMBS = PKeyMBS.Open(RootKey)

// and a root certificate
Var rootCertFields As New Dictionary
rootCertFields.Value("C") = "US"
rootCertFields.Value("O") = "MyOrg Root CA"
rootCertFields.Value("CN") = "MyRootCA"

Var param As New SignCertificateParametersMBS

param.BasicConstraints = "critical,CA:TRUE"
param.KeyUsage = "critical,keyCertSign,cRLSign"
param.authorityKeyIdentifier = "keyid:always,issuer"
param.expireAfterTime = 31536000 * 2 // 2 years

Var rootCert As X509MBS = pRootKey.GenerateRootCertificate(rootCertFields, param)

var des as string = rootCert.Description

Break