prompt=no

[ req ]
default_bits           = 1024
default_keyfile        = privkey.pem
distinguished_name     = req_distinguished_name
attributes             = req_attributes
x509_extensions        = v3_ca
dirstring_type = nobmp
 
[ req_distinguished_name ]
C                      = GB
ST                     = Test State or Province
L                      = Test Locality
O                      = Organization Name
OU                     = Organizational Unit Name
CN                     = Common Name
emailAddress           = test@email.address

[ req_attributes ]
challengePassword              = 5a3a75c5741807b5a6b405ddf1b0f143

[ v3_ca ]
basicConstraints=CA:FALSE
crlDistributionPoints=URI:http://myhost.com/myca.crl
subjectKeyIdentifier=hash
subjectAltName=dirName:dir_sect
authorityKeyIdentifier=keyid
keyUsage= critical, digitalSignature, keyEncipherment, dataEncipherment

[dir_sect]
C=UK
O=My Organization
OU=My Unit
CN=My Name