[req] req_extensions = v3_req distinguished_name = req_distinguished_name [ v3_req ] basicConstraints = CA:FALSE keyUsage = nonRepudiation, digitalSignature, keyEncipherment subjectAltName = @alt_names extendedKeyUsage = serverAuth [alt_names] DNS = foobar.com [req_distinguished_name]