[req] extensions = v3_req distinguished_name = req_distinguished_name [req_distinguished_name] [v3_req] basicConstraints = critical,CA:FALSE keyUsage = critical,digitalSignature, keyEncipherment extendedKeyUsage = serverAuth subjectAltName = DNS:localhost