openssl.cnf

dir	= .

[ req_distinguished_name ]
# Variable name               Prompt string
#-------------------------   ----------------------------------
0.organizationName         =  Organization Name (company)
organizationalUnitName     = Organizational Unit Name (department, division)
emailAddress               = Email Address
emailAddress_max           = 40
localityName               = Locality Name (city, district)
stateOrProvinceName        = State or Province Name (full name)
countryName                = Country Name (2 letter code)
countryName_min            = 2
countryName_max            = 2
commonName                 = Common Name (hostname, IP, or your name)
commonName_max             = 64

[ req ]
default_bits       = 2048
default_md         = sha512
string_mask        = nombstr
distinguished_name = req_distinguished_name
req_extensions     = v3_req

[ v3_ca ]
basicConstraints       = CA:TRUE
subjectKeyIdentifier   = hash
authorityKeyIdentifier = keyid:always,issuer:always

[ v3_req ]
basicConstraints     = CA:FALSE
subjectKeyIdentifier = hash
subjectAltName       = $ENV::ALTNAME