title: Creating an x509 v3 user certificate by signing CSR
body: <p>I know how to sign a CSR using <code>openssl</code>, but the result certificate is an x509 v1, and not v3.</p>
  
  <p>I'm using the following commands:</p>
  
  <pre><code>x509 -req -days 365 -in myCSR.csr -CA myCA.crt -CAkey myCA.key -CAcreateserial -out userCertificate.crt
  </code></pre>
  
  <p>I've searched but have not been able to find a solution. Is there another way to do this programmatically?</p>