[req]
default_bits = 4096
encrypt_key = yes
default_md = sha256
utf8 = yes
string_mask = utf8only
prompt = yes
distinguished_name = server_dn
req_extensions = server_reqext

[server_dn]
0.domainComponent = "(leave)"
0.domainComponent_default = "me"
1.domainComponent = "(leave)"
1.domainComponent_default = "sdore"
2.domainComponent = "(leave)"
2.domainComponent_default = "ipoc"
organizationName = "(leave)"
organizationName_default = "IPOC"
countryName = "Country"
countryName_min = 2
stateOrProvinceName = "State or province"
localityName = "Locality"
commonName = "IPv4"
commonName_min = 7   # x.x.x.x
commonName_max = 15  # xxx.xxx.xxx.xxx
emailAddress = "E-mail"
emailAddress_min = 5  # x@x.x

[server_reqext]
keyUsage = critical,digitalSignature,keyEncipherment
extendedKeyUsage = serverAuth,clientAuth
subjectKeyIdentifier = hash