Generating Client x.509 Certificates

I’m working on setup for a MongoDB 7.0.15 standalone on Windows using self-signed certificates generated with OpenSSL. After some trial and error, I think the server portion is up and running.

I’m a little confused reading the requirements for the client cert at https://www.mongodb.com/docs/manual/core/security-x.509/#std-label-security-auth-x509 about how to get all those things in there.

Can someone provide an example OpenSSL cmd line to generate a client cert?