1 - Create the CA
The important thing is to set the following extensions:- Basic Constraints: Subject is a CA
- Key Usage: Certificate Signing
2 - Create the timestamp certificate
The important thing is to set the following extensions:- Extended Key Usage: Time Stamping [Critial extension]