| [ req ] |
| distinguished_name = req_distinguished_name |
| |
| [ req_distinguished_name ] |
| |
| [ ca_ext ] |
| basicConstraints = CA:TRUE,pathlen:0 |
| subjectKeyIdentifier = hash |
| authorityKeyIdentifier = keyid:always,issuer:always |
| |
| [ int_ext ] |
| basicConstraints = CA:TRUE |
| subjectKeyIdentifier = hash |
| |
| [ cert_ext ] |
| basicConstraints = CA:FALSE |
| subjectKeyIdentifier = hash |
| |
| [ server_ext ] |
| basicConstraints = CA:FALSE |
| subjectKeyIdentifier = hash |
| authorityKeyIdentifier = keyid:always,issuer:always |
| subjectAltName = DNS:foo.int.example,DNS:foo.int.com |
| |
| [ ca_no_akid_ext ] |
| basicConstraints = CA:TRUE |
| |
| [ no_keyid_ext ] |
| basicConstraints = CA:FALSE |
| authorityKeyIdentifier = issuer:always |
