HOME            = .
RANDFILE        = $ENV::HOME/.rnd

####################################################################
[ req ]
default_bits        = 4096
default_keyfile     = example.key
distinguished_name  = server_distinguished_name
req_extensions      = server_req_extensions
string_mask         = utf8only

####################################################################
[ server_distinguished_name ]
countryName         = Country Name (2 letter code)
countryName_default     = DE

stateOrProvinceName     = State or Province Name (full name)
stateOrProvinceName_default = Niedersachsen

localityName            = Locality Name (eg, city)
localityName_default        = Goettingen

organizationName            = Organization Name (eg, company)
organizationName_default    = Max-Planck-Gesellschaft

# The name of your CA subordinate RA can be found here 
# https://info.gwdg.de/docs/doku.php?id=de:services:it_security:pki:mpgras
# and thus, replace the value PKI
organizationalUnitName	= Organizational Unit Name (eg, your Max-Planck-Institute)
organizationalUnitName_default	= PKI

commonName          = Common Name (eg, server FQDN or YOUR name)
commonName_default      = example.mpg.de

emailAddress            = Email Address
emailAddress_default        = noreply@mpg.de

####################################################################
[ server_req_extensions ]

subjectKeyIdentifier        = hash
basicConstraints        = CA:FALSE
keyUsage            = digitalSignature, keyEncipherment
subjectAltName          = @alternate_names
nsComment           = "OpenSSL Generated Certificate"

####################################################################
[ alternate_names ]

DNS.1       = example-san-1.mpg.de
DNS.2       = example-san-2.mpg.de