Dear Ugo,

I need to create my own certificate authority. I have completed all the necessary steps, but still one step is to know how to sign a daughter certificate from the root certificate without using any open source library. I have checked OpenSSL it uses the function X509_sign i went throught the code but i wasn't able to know what it is signing. The signature needs to be done on the HSM using the private key of the Root Certificate of my CA on the HSM.

so my question is: when processing a certificate request what are we signing from this daughter certificate?