1[ req ] 2default_bits = 1024 3default_keyfile = privkey.pem 4distinguished_name = req_distinguished_name 5attributes = req_attributes 6x509_extensions = v3_ca # The extensions to add to the self signed cert 7string_mask = MASK:4294967295 8 9 10[ req_distinguished_name ] 11countryName = Country Name (2 letter code) 12countryName_default = AU 13countryName_min = 2 14countryName_max = 2 15stateOrProvinceName = State or Province Name (full name) 16stateOrProvinceName_default = Some-State 17localityName = Locality Name (eg, city) 180.organizationName = Organization Name (eg, company) 190.organizationName_default = Internet Widgits Pty Ltd 20organizationalUnitName = Organizational Unit Name (eg, section) 21commonName = Common Name (eg, YOUR name) 22commonName_max = 64 23emailAddress = Email Address 24emailAddress_max = 64 25 26[ req_attributes ] 27challengePassword = A challenge password 28challengePassword_min = 4 29challengePassword_max = 20 30unstructuredName = An optional company name 31 32[ v3_req ] 33basicConstraints = CA:FALSE 34keyUsage = nonRepudiation, digitalSignature, keyEncipherment 35 36[ v3_ca ] 37subjectKeyIdentifier=hash 38authorityKeyIdentifier=keyid:always,issuer:always 39basicConstraints = CA:true 40 41[ usr_cert ] 42basicConstraints=CA:FALSE 43 44