[ req ] prompt = no distinguished_name = req_distinguished_name req_extensions = req_extensions [ req_distinguished_name ] C = AT CN = Fabian Peter Hammerle emailAddress = fabian@hammerle.me [ req_extensions ] # man x509v3_config subjectAltName = email:fabian@hammerle.me, email:fabian.hammerle@gmail.com basicConstraints = critical,CA:FALSE keyUsage = digitalSignature extendedKeyUsage = clientAuth nsCertType = client nsComment = client authentication only subjectKeyIdentifier = hash