openssl-ca.pod.in: Clarify the -extensions/-crlexts options vs. x509_extensions/crl_extensions
@@ -271,10 +271,10 @@ and all certificates will be certified automatically.
The section of the configuration file containing certificate extensions
to be added when a certificate is issued (defaults to B<x509_extensions>
-unless the B<-extfile> option is used). If no extension section is
-present then, a V1 certificate is created. If the extension section
-is present (even if it is empty), then a V3 certificate is created. See the
-L<x509v3_config(5)> manual page for details of the
+unless the B<-extfile> option is used).
+If no X.509 extensions are specified then a V1 certificate is created,
+else a V3 certificate is created.
+See the L<x509v3_config(5)> manual page for details of the
extension section format.
=item B<-extfile> I<file>
@@ -540,11 +540,11 @@ present, it must contain a valid CRL number.
=item B<x509_extensions>
-The same as B<-extensions>.
+A fallback to the B<-extensions> option.
=item B<crl_extensions>
-The same as B<-crlexts>.
+A fallback to the B<-crlexts> option.
=item B<preserve>
