[ req ]
default_md = sha256
prompt = no
req_extensions = req_ext
distinguished_name = req_distinguished_name

[ req_distinguished_name ]
commonName = Tcllib PKI Test CA
countryName = US
organizationName = Tcllib
organizationalUnitName = PKI
emailAddress = admin@test.tcllib

[ req_ext ]
subjectKeyIdentifier = hash
authorityKeyIdentifier = keyid:always,issuer
keyUsage=critical,digitalSignature,keyCertSign,cRLSign
basicConstraints=critical,CA:true
subjectAltName = @alt_names

[ alt_names ]
DNS = ca.test.tcllib