...
- Certificate type: Leave the setting on Certificate.
- Template: In the drop-down menu select the option Certificate Authority.
- Common name (CN): Enter a descriptive common name (in this example VPN-SSL-CA).
- Private key password: Set a password. This is used to encrypt the private key.
- Validity: Specify how long the certificate should remain valid. For a CA, the period of validity is usually set to be very high. The default setting for a CA is a validity of 5 years.
...