Hi, all!

I use openssl to sign erificate request by this way:
openssl ca -passin pass:5234590 -policy policy_match -out 1.crt -infiles 1.csr
Please help me: how to generate certificate that should just protect email?
Sorry for my bad English
Thanks for advises!