[ req ]
default_bits       = 2048
distinguished_name = req_DN
string_mask        = nombstr
req_extensions = v3_req

[ req_DN ]
countryName                     = "1. Country Name             (2 letter code)"
countryName_default             = DE
countryName_min                 = 2
countryName_max                 = 2
stateOrProvinceName             = "2. State or Province Name   (full name)    "
stateOrProvinceName_default     = NRW
localityName                    = "3. Locality Name            (eg, city)     "
localityName_default            = Essen
0.organizationName              = "4. Organization Name        (eg, company)  "
0.organizationName_default      = NDSEDV
organizationalUnitName          = "5. Organizational Unit Name (eg, section)  "
organizationalUnitName_default  = IT
commonName                      = "6. Common Name              (eg, CA name)  "
commonName_max                  = 64
commonName_default              = v-cert-01.ndsedv.de
emailAddress                    = "7. Email Address            (eg, name@FQDN)"
emailAddress_max                = 40
emailAddress_default            = team@nds-edv.de

[ v3_req ]
# Extensions to add to a certificate request
basicConstraints = CA:FALSE
keyUsage = nonRepudiation, digitalSignature, keyEncipherment
subjectAltName = @alt_names

[alt_names]
DNS.1 = v-cert-01.ndsedv.de
DNS.2 = v-cert-01.nds-edv.de
DNS.3 = 10.100.200.50