title: How to change the expiration date for a self created Certificate Authority in keychain
body: <p>I'm trying to create a Certificate Authority in Keychain on Mac using stored public &amp; private keys.  The output CA has an expiration date of a year from the creation date.</p>
  
  <p>I would like to increase the duration of the certificate validity.</p>
  
  <p>I can do it on linux with this <a href="https://help.ubuntu.com/community/OpenSSL" rel="nofollow">tutorial</a> by the following command:</p>
  
  <pre><code>openssl req -x509 -newkey rsa:2048 -out cacert.pem -outform PEM -days 1825
  </code></pre>
  
  <p>The command will create a certificate authority that expires in 5 years.</p>
  
  <p><em><strong>Is it possible to do that using keychain or another method (changing some configuration files)? and HOW?</em></strong></p>