[ req ] distinguished_name = req_distinguished_name req_extensions = v3_req # The extensions to add to a certificate request [ req_distinguished_name ] countryName = Country Name (2 letter code) countryName_default = CA stateOrProvinceName = State or Province Name (full name) stateOrProvinceName_default = Quebec localityName = Locality Name (eg, city) localityName_default = Montreal organizationName = Organization Name (eg, company) organizationName_default = Your company name organizationalUnitName = Organizational Unit Name (eg, section) organizationalUnitName_default = Web Technologies commonName = Common Name (eg, your name or your server's hostname) commonName_max = 64 commonName_default = www.yourdomain.org emailAddress = Email Address emailAddress_max = 64 emailAddress_default = support@yourdomain.com [ v3_req ] # Extensions to add to a certificate request basicConstraints = CA:FALSE keyUsage = nonRepudiation, digitalSignature, keyEncipherment subjectAltName = @alt_names [ alt_names ] DNS.1 = alt.yourdomain.org DNS.2 = alt.otherdomain.com