[ req ]
prompt = no
distinguished_name = req_distinguished_name
req_extensions = req_extensions

[ req_distinguished_name ]
CN = fabian.hammerle.me

[ req_extensions ]
# man x509v3_config
subjectAltName = critical, DNS:fabian.hammerle.me
basicConstraints = critical,CA:FALSE
keyUsage = critical, digitalSignature, keyEncipherment
extendedKeyUsage = serverAuth
nsCertType = server
subjectKeyIdentifier = hash