HOME            = .
RANDFILE        = $ENV::HOME/.rnd

[ req ]
default_bits       = 4096
distinguished_name = req_distinguished_name
req_extensions     = client_extensions

[ req_distinguished_name ]
countryName                   = Country Name (2-letter code)
countryName_default           = CH
stateOrProvinceName           = State or Province Name (full name)
stateOrProvinceName_default   = Geneva
localityName                  = Locality (e.g. city name)
localityName_default          = Geneva
organizationName              = Organization (e.g. company name)
organizationName_default      = SonarSource SA
commonName                    = Common Name (your.domain.com)
commonName_default            = Julien Henry

[ client_extensions ]
basicConstraints = CA:FALSE
keyUsage = digitalSignature, keyEncipherment, dataEncipherment
extendedKeyUsage = clientAuth
nsCertType = client

[ ca_extensions ]
basicConstraints = CA:FALSE
keyUsage = keyEncipherment, dataEncipherment, keyCertSign, cRLSign, digitalSignature
extendedKeyUsage = serverAuth
subjectKeyIdentifier   = hash
authorityKeyIdentifier = keyid:always, issuer
basicConstraints       = critical, CA:true