How to create a certificate signed by your CA in windows?

Question

System administration

I create a certificate signed by my own CA certificate
The task is to sign PDF and xls files using my trust center

Работает но не  подходит поскольку говорит что сертификат недоверительный
openssl genrsa -out C:\certificate\rootCA.key 4096
openssl req -x509 -new -nodes -key rootCA.key -days 365 -out C:\certificate\rootCA.crt
openssl genrsa -out C:\certificate\server101.mycloud.key 4096
openssl req -new -key server101.mycloud.key -out server101.mycloud.csr
openssl x509 -req -in server101.mycloud.csr -CA rootCA.crt -CAkey rootCA.key -CAcreateserial -out server101.mycloud.crt -days 365

Just as I understand Windows needs a different certificate format

openssl pkcs12 -export -inkey server101.mycloud.key  -in server101.mycloud.crt -name my_name -out final_result.pfx

What's wrong ?

Answer 1

"This certificate is not valid for this destination." For example, you have it for server authentication, and you use it for code signing.