[req] prompt = no distinguished_name = req_dn x509_extensions = v3_ca [req_dn] commonName = *.${dom.name} [v3_ca] basicConstraints = CA:FALSE extendedKeyUsage=serverAuth subjectAltName=DNS:*.${dom.name},DNS:${dom.name}