[ req ] distinguished_name = req_distinguished_name x509_extensions = v3_ca prompt = no [req_distinguished_name] CN = 272254864.xyz [v3_ca] basicConstraints = CA:FALSE subjectAltName = DNS:*.272254864.xyz extendedKeyUsage = serverAuth