1[req] 2x509_extensions = v3_ca 3distinguished_name = req_dn 4 5[req_dn] 6countryName = NL 7organizationalUnitName = PolarSSL 8commonName = PolarSSL Test CA 9 10[v3_ca] 11subjectKeyIdentifier=hash 12authorityKeyIdentifier=keyid:always,issuer:always 13basicConstraints = CA:true 14 15[noext_ca] 16basicConstraints = CA:true 17 18[test_ca] 19database = /dev/null 20 21[crl_ext_idp] 22issuingDistributionPoint=critical, @idpdata 23 24[crl_ext_idp_nc] 25issuingDistributionPoint=@idpdata 26 27[idpdata] 28fullname=URI:http://pki.example.com/ 29 30# these IPs are the ascii values for 'abcd' and 'abcd.example.com' 31[tricky_ip_san] 32subjectAltName=IP:97.98.99.100,IP:6162:6364:2e65:7861:6d70:6c65:2e63:6f6d 33