1 [ ca ] 2 default_ca = test-ca 3 4 [ test-ca ] 5 certificate = test-ca.crt 6 private_key = test-ca.key 7 serial = test-ca.server1.tmp.serial 8 default_md = sha1 9 default_startdate = 20190210144406Z 10 default_enddate = 20290210144406Z 11 x509_extensions = v3_ca 12 new_certs_dir = ./ 13 database = ./test-ca.server1.db 14 policy = policy_match 15 unique_subject = no 16 17 [v3_ca] 18 basicConstraints = CA:false 19 subjectKeyIdentifier=hash 20 authorityKeyIdentifier=keyid:always 21 22 [policy_match] 23 countryName = supplied 24 organizationName = supplied 25 commonName = supplied 26