[req] distinguished_name = req_distinguished_name prompt = no [req_distinguished_name] CN = localhost [v3] basicConstraints = CA:FALSE keyUsage = digitalSignature, nonRepudiation, keyAgreement extendedKeyUsage = serverAuth