Two new commands:
-gencert: Generates a certificate according to a certificate request
-printcertreq: Prints the content of a certificate request
One new option:
-ext: Used in -genkeypair and -gencert to create X.509 certificate extensions in the generated certificates, or in -certreq to show what X.509 certificate extensions are requested in the certificate request.