self signed root certificate.
The 'x509' utility also supports extensions when it signs a certificate.
-The -config option is used to set the configuration file containing the
+The -extfile option is used to set the configuration file containing the
extensions. In this case a line with:
extensions = extension_section