[ req ]
prompt = no
distinguished_name = req_distinguished_name
req_extensions = req_extensions

[ req_distinguished_name ]
CN = test

[ req_extensions ]
# man x509v3_config
basicConstraints = critical,CA:FALSE
keyUsage = critical, digitalSignature, keyEncipherment, dataEncipherment
nsComment = only for testing purposes
subjectKeyIdentifier = hash