[ req ]
 default_keyfile         = wildcard_privatekey.pem
 distinguished_name      = req_distinguished_name
 encrypt_key             = no
 string_mask = nombstr
 req_extensions = v3_req # Extensions to add to certificate request

 [ req_distinguished_name ]
 commonName              = Common Name (eg, YOUR name)
 commonName_default      = *.riseup.net
 commonName_max          = 64

 [ v3_req ]
 subjectAltName=DNS:riseup.net, DNS:*.riseup.net
 keyUsage=serverAuth,clientAuth