The vCenter certificate wizard generated a .csr. I've used our OpenVPN CA to sign the CSR and have been issued with the certificate. However it does not seem to meet VMwares requirements. Their documentation states:
It looks like the generated certificate has the "Digital Signature" bit.Ensure that Digital Signature, Certificate signing and CRL signing are enabled
[andy@home-pc openvpn-ca]$ cat keys/vmca_issued_csr.csr.crt | grep Digital
However, how do I ensure "certificate signing" and "CRL" are enabled?