carta

openssl-ca(1ssl) on Linux

The text 6391caa73740, as Debian 9 (Stretch) shipped it.

sample minimal CA application

Flags it lists

openssl-ca(1ssl) on Linux now