```
...
[ ca ]
# `man ca`
default_ca = CA_default

[ CA_default ]
# Directory and file locations.
database          = ${ENV::OPENSSL_PATH_INTER_INDEX}
serial            = ${ENV::OPENSSL_PATH_INTER_SERIAL}
RANDFILE          = ${ENV::OPENSSL_PATH_INTER_RAND}

# SHA-1 is deprecated, so use SHA-2 instead.
default_md        = sha256
name_opt          = ca_default
cert_opt          = ca_default
default_days      = 375
preserve          = no
policy            = policy_loose
unique_subject    = no
...
```
that config file results in:
```
Using configuration from config/intermediate/webservices/openssl.cnf
Check that the request matches the signature
Signature ok
ERROR:There is already a certificate for {removed}
The matching entry has the following details
Type          :Valid
Expires on    :190514002759Z
Serial Number :1002
File name     :unknown
Subject Name  :{removed}
```