[req]
prompt = no
distinguished_name = req_dn
x509_extensions = v3_ca 

[req_dn]
commonName = *.${dom.name}

[v3_ca]
basicConstraints = CA:FALSE
extendedKeyUsage=serverAuth
subjectAltName=DNS:*.${dom.name},DNS:${dom.name}