Use your CA to process the CSR obtained in Generating a timestamping key pair and issue a certificate with the following extension values.
| Extension | Value | 
|---|---|
| Key Usage | digitalSignature | 
| Extended Key Usage | timeStamping | 
See below for how to issue this certificate with Entrust products.