How to create a certificate signing request using `openssl req`?

You can create a certificate signing request in the same way as a root certificate, but skipping the -x509 and -days options:

openssl req \
	-keyout .key \
	-new \
	-nodes \
	-out .csr \
	-sha256

2023-06-25--17-34-18

I left «challenge password» and «optional company name» blank.