| |
| [ v3_end ] |
| basicConstraints = critical,CA:false |
| keyUsage = nonRepudiation, digitalSignature |
| subjectKeyIdentifier = hash |
| authorityKeyIdentifier = keyid:always,issuer:always |
| subjectAltName = @alt_names |
| |
| [ v3_client ] |
| basicConstraints = critical,CA:false |
| keyUsage = nonRepudiation, digitalSignature |
| extendedKeyUsage = critical, clientAuth |
| subjectKeyIdentifier = hash |
| authorityKeyIdentifier = keyid:always,issuer:always |
| |
| [ v3_inter ] |
| subjectKeyIdentifier = hash |
| extendedKeyUsage = critical, serverAuth, clientAuth |
| basicConstraints = CA:true |
| keyUsage = cRLSign, keyCertSign, digitalSignature, nonRepudiation, keyEncipherment, dataEncipherment, keyAgreement, keyCertSign, cRLSign |
| |
| [ alt_names ] |
| DNS.1 = testserver.com |
| DNS.2 = second.testserver.com |
| DNS.3 = localhost |