Config file

[req].

Distinguished_name = req_distinguished_name.

Req_extensions = v3_req.

?for v1.

X509_extensions.

?for v3.

Prompt = no.

[ req_distinguished_name ].

CountryName = Country Name (2 letter code).

StateOrProvinceName = State or Province Name (full name).

LocalityName = Locality Name (eg, city).

OrganizationName = Organization Name (eg, company).

OrganizationalUnitName = Organizational Unit Name (eg, section).

CommonName = CN.

EmailAddress =.

[ v3_req ].

BasicConstraints = CA:FALSE.

keyUsage = digitalSignature, keyEncipherment

Does not work in v3.

keyUsage = nonRepudiation, digitalSignature, keyEncipherment

Works in v3.

SubjectAltName = @alt_names.

[ alt_names ].

DNS.1 = ..com.

DNS.2 = ..com.

sub of sub domain not covered by *. So *.<foo>.<domain>