| [ req ] |
| distinguished_name = req_distinguished_name |
| |
| [ req_distinguished_name ] |
| |
| [ ca_ext ] |
| basicConstraints = CA:TRUE,pathlen:0 |
| subjectKeyIdentifier = hash |
| authorityKeyIdentifier = keyid:always,issuer:always |
| |
| [ int_ext ] |
| basicConstraints = CA:TRUE |
| subjectKeyIdentifier = hash |
| authorityKeyIdentifier = keyid:always,issuer:always |
| |
| [ cert_ext ] |
| basicConstraints = CA:FALSE |
| subjectKeyIdentifier = hash |
| authorityKeyIdentifier = keyid:always,issuer:always |
| |
| [ server_ext ] |
| basicConstraints = CA:FALSE |
| subjectKeyIdentifier = hash |
| authorityKeyIdentifier = keyid:always,issuer:always |
| subjectAltName = DNS:foo.example.org |