- OpenSSL Version V3 with Subject Alternative Name
- [ req ]
- default_bits = 2048
- default_keyfile = privkey.pem
- distinguished_name = req_distinguished_name
- emailAddress = myEmail@email.com
- req_extensions = v3_req
- x509_extensions = v3_ca
- [req_distinguished_name]
- C = [Press Enter to Continue]
- C_default = US
- C_min = 2
- C_max = 2
- O = [Press Enter to Continue]
- O_default = default
- 0.OU=[Press Enter to Continue]
- 0.OU_default = default
- 1.OU=[Press Enter to Continue]
- 1.OU_default = PKI
- 2.OU=[Press Enter to Continue]
- 2.OU_default = ABCD
- commonName = Public FQDN of server
- commonName_max = 64
- [ v3_req ]
- basicConstraints = CA:FALSE
- keyUsage = digitalSignature, nonRepudiation, keyEncipherment
- [ v3_ca ]
- subjectKeyIdentifier = hash
- authorityKeyIdentifier = keyid:always,issuer:always
- subjectAltName = email:myEmail@email.com
- issuerAltName = issuer:copy
- [ req ]
- default_bits = 2048
- default_keyfile = privkey.pem
- distinguished_name = req_distinguished_name
- req_extensions = v3_req
- x509_extensions = v3_ca
- [req_distinguished_name]
- C = [Press Enter to Continue]
- C_default = US
- C_min = 2
- C_max = 2
- O = [Press Enter to Continue]
- O_default = default
- 0.OU=[Press Enter to Continue]
- 0.OU_default = default
- 1.OU=[Press Enter to Continue]
- 1.OU_default = PKI
- 2.OU=[Press Enter to Continue]
- 2.OU_default = ABCD
- commonName = Public FQDN of server
- commonName_max = 64
- emailAddress = [Press Enter to Continue]
- emailAddress_default = myEmail@email.com
- [ v3_req ]
- basicConstraints = CA:FALSE
- keyUsage = digitalSignature, nonRepudiation, keyEncipherment
- [ v3_ca ]
- subjectKeyIdentifier = hash
- authorityKeyIdentifier = keyid:always,issuer:always
- subjectAltName = email:myEmail@email.com
- issuerAltName = issuer:copy
- openssl req -config req.cnf -new -nodes -out req.pem -x509