[ req ]
default_bits = 2048
distinguished_name  = req_distinguished_name
req_extensions     = req_ext
[ req_distinguished_name ]
countryName                  = Country Name (2 letter code)
countryName_default          = {{ ca_country }}
stateOrProvinceName          = State or Province Name (full name)
stateOrProvinceName_default  = {{ ca_state }}
localityName                 = Locality Name (eg, city)
localityName_default         = {{ ca_locality }}
organizationName             = Organization Name (eg, company)
organizationName_default     = {{ ca_organization }}
commonName                   = Common Name (eg, YOUR name or FQDN)
commonName_max               = 64
commonName_default           = *.{{ ca_domain }}
[ req_ext ]
basicConstraints = CA:FALSE
keyUsage = nonRepudiation, digitalSignature, keyEncipherment
subjectAltName = @alt_names
[alt_names]
DNS.1 = *.{{ ca_domain }}