[ req ] distinguished_name = req_dn x509_extensions = v3_ca # The extentions to add to self signed certs req_extensions = v3_req # The extensions to add to req's [ v3_req ] # Lets at least make our requests PKIX complaint subjectAltName=email:move [ req_dn ] C = DE [ v3_ca ] subjectKeyIdentifier = hash authorityKeyIdentifier = keyid:always,issuer:always basicConstraints = critical,CA:true keyUsage = critical, cRLSign, digitalSignature, keyCertSign #copy_extensions = copy