1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
|
# Root CA
[ req ]
default_md = sha256
utf8 = yes
string_mask = utf8only
prompt = no
distinguished_name = req_dn
req_extensions = req_ext
x509_extensions = v3_req_ext
[ req_dn ]
0.domainComponent = "COM"
1.domainComponent = "EXAMPLE"
organizationalUnitName = "Certificate Authority"
commonName = "ca.example.com"
emailAddress = "ca@example.com"
[ req_ext ]
subjectKeyIdentifier = hash
#authorityKeyIdentifier = keyid:always,issuer:always
basicConstraints = critical,CA:true
keyUsage = critical,keyCertSign,cRLSign
[ v3_req_ext ]
subjectKeyIdentifier = hash
authorityKeyIdentifier = keyid:always,issuer:always
basicConstraints = critical,CA:true
keyUsage = critical,keyCertSign,cRLSign
subjectAltName = email:ca@example.com
issuerAltName = issuer:copy
|
