1[req] 2x509_extensions = v3_ca 3distinguished_name = req_dn 4 5[req_dn] 6countryName = NL 7organizationalUnitName = PolarSSL 8commonName = PolarSSL Test CA 9 10[v3_ca] 11subjectKeyIdentifier=hash 12authorityKeyIdentifier=keyid:always,issuer:always 13basicConstraints = CA:true 14 15[othername_san] 16subjectAltName=otherName:1.3.6.1.5.5.7.8.4;SEQ:hw_module_name 17 18[unsupoported_othername_san] 19subjectAltName=otherName:1.2.3.4;UTF8:some other identifier 20 21[dns_alt_names] 22subjectAltName=DNS:example.com, DNS:example.net, DNS:*.example.org 23 24[alt_names] 25DNS.1=example.com 26otherName.1=1.3.6.1.5.5.7.8.4;SEQ:hw_module_name 27DNS.2=example.net 28DNS.3=*.example.org 29 30[multiple_san] 31subjectAltName=@alt_names 32 33[hw_module_name] 34hwtype = OID:1.3.6.1.4.1.17.3 35hwserial = OCT:123456 36 37[v3_any_policy_ca] 38basicConstraints = CA:true 39certificatePolicies = 2.5.29.32.0 40 41[v3_any_policy_qualifier_ca] 42basicConstraints = CA:true 43certificatePolicies = @policy_info 44 45[v3_multi_policy_ca] 46basicConstraints = CA:true 47certificatePolicies = 1.2.3.4,2.5.29.32.0 48 49[v3_unsupported_policy_ca] 50basicConstraints = CA:true 51certificatePolicies = 1.2.3.4 52 53[policy_info] 54policyIdentifier = 2.5.29.32.0 55CPS.1 ="CPS uri string" 56 57[fan_cert] 58extendedKeyUsage = 1.3.6.1.4.1.45605.1 59 60[noext_ca] 61basicConstraints = CA:true 62 63[test_ca] 64database = /dev/null 65 66[crl_ext_idp] 67issuingDistributionPoint=critical, @idpdata 68 69[crl_ext_idp_nc] 70issuingDistributionPoint=@idpdata 71 72[idpdata] 73fullname=URI:http://pki.example.com/ 74 75# these IPs are the ascii values for 'abcd' and 'abcd.example.com' 76[tricky_ip_san] 77subjectAltName=IP:97.98.99.100,IP:6162:6364:2e65:7861:6d70:6c65:2e63:6f6d 78