ca.conf

[req]
distinguished_name = req_distinguished_name
x509_extensions    = v3_ca
prompt             = no

[req_distinguished_name]
C= RU
ST = RA
L = Moscow
O = XXX
OU = ROOTCA
CN = site.dev
emailAddress = support@site.dev

[v3_ca]
basicConstraints       = CA:true
nsComment              = "CA certificate of XXX"
nsCertType             = sslCA, emailCA
subjectKeyIdentifier   = hash
authorityKeyIdentifier = keyid:always,issuer:always