[3.2. Signing of certificate signing requests by the UCS certificate authority](https://docs.software-univention.de/domain-5.0.html#extdom:ssl:sign) still uses the low-level command `openssl ca` directly, while `univention-cettificate sign` is supported since UCS-4.1 (2017) and should be used and documented.