1; specific the subject parameters on the cli
exec vpn certificate local generate ec <CRTNAME> secp521r1 <cn.name> C ST L O OU emailaddress
2; execute a GET and SHOW full to validate
3; copy down the CSR portion and send it to your Authority for signing
SECTION masked in blue you send to the CA.
NSE ( network security expert) and Route/Switching Engineer
kfelix -----a----t---- socpuppets ---dot---com
=( @ @ )=