[req] distinguished_name = req_distinguished_name prompt = no x509_extensions = v3_ca [req_distinguished_name] C = US ST = North Carolina L = Raleigh CN = ca.profian.localhost [v3_ca] basicConstraints = critical,CA:TRUE keyUsage = cRLSign, keyCertSign nsComment = "CA certificate" subjectKeyIdentifier = hash