1 2 3 4 5 6 7 8 9 10
[req] req_extensions = cacert distinguished_name = req_distinguished_name [req_distinguished_name] [cacert] basicConstraints = critical,CA:true keyUsage = keyCertSign