1[req] 2distinguished_name = req_distinguished_name 3attributes = req_attributes 4 5[req_distinguished_name] 6 7[req_attributes] 8 9[test_ca] 10basicConstraints = critical,CA:TRUE 11subjectKeyIdentifier = hash 12authorityKeyIdentifier = keyid:always,issuer:always 13keyUsage = critical,keyCertSign 14 15[test_server] 16basicConstraints = critical,CA:FALSE 17subjectKeyIdentifier = hash 18keyUsage = critical,digitalSignature,keyEncipherment,keyAgreement 19subjectAltName = @server_alt_names 20 21[server_alt_names] 22DNS.1 = *.test.example.com 23 24[test_client] 25basicConstraints = critical,CA:FALSE 26subjectKeyIdentifier = hash 27keyUsage = critical,nonRepudiation,digitalSignature,keyEncipherment 28extendedKeyUsage = critical,clientAuth 29