// we need a root key
Var RootKey As String = OpenSSLMBS.GeneratePrivateKey
Var pRootKey As PKeyMBS = PKeyMBS.Open(RootKey)

// and a root certificate
Var rootCertFields As New Dictionary
rootCertFields.Value("C") = "US"
rootCertFields.Value("O") = "MyOrg Root CA"
rootCertFields.Value("CN") = "MyRootCA"
Var rootCert As X509MBS = pRootKey.GenerateRootCertificate(rootCertFields)

// and a client kesy
Var clientKey As String = OpenSSLMBS.GeneratePrivateKey
Var pclientKey As PKeyMBS = PKeyMBS.Open(clientKey)

// and we request a client certificate
Var clientCertFields As New Dictionary
clientCertFields.Value("C") = "US"
clientCertFields.Value("O") = "Client Org"
clientCertFields.Value("CN") = "Client Company"
Var clientCSR As String = pclientKey.GenerateCertificateSigningRequest(clientCertFields)

// let's make a client certificate

Var params As New SignCertificateParametersMBS
params.CSR = clientCSR
params.RootKey = pRootKey
params.RootCert = rootCert

Var ClientCert As X509MBS = pRootKey.SignCertificate(params)

Break