Mikeie Reiland is a staff writer for Education at Forbes Advisor. Before coming to Forbes Advisor, he wrote magazine journalism for publications like the Oxford American, Bitter Southerner, and Gravy.

I'm trying to generate a certificate (using the openssl command line tool) that can't actually DO anything - can't sign, can't encrypt. Is this possible? It seems like the purpose of the certificate ...