[ CA_default ] copy_extensions = copy [ req ] default_bits = 1024 days = 9999 distinguished_name = req_subject_name attributes = req_attributes prompt = no x509_extensions = v3_req req_extensions = v3_req [ req_subject_name ] CN = evil.com [ req_attributes ] challengePassword = A challenge password [ v3_req ] subjectAltName = @alt_names [alt_names] DNS.1 = google.com.evil.com DNS.2 = just-another.com IP.1 = 8.8.8.8 IP.2 = 8.8.4.4 DNS.3 = last.com