rootca.cnf

# For the CA policy 
[ policy_match ] 
countryName = match 
stateOrProvinceName = match 
organizationName = match 
organizationalUnitName = optional 
commonName = supplied 
emailAddress = optional 

[ req ] 
default_bits = 4096 
default_keyfile = rootca.pem    ## The default private key file name. 
default_md = sha256                           ## Use SHA-256 for Signatures 
distinguished_name = req_dn 
req_extensions = v3_req 
x509_extensions = v3_ca # The extentions to add to the self-signed cert 

[ v3_req ] 
subjectKeyIdentifier  = hash 
basicConstraints = CA:FALSE 
keyUsage = critical, digitalSignature, keyEncipherment 
nsComment = "OpenSSL Generated Certificate for TESTING only.  NOT FOR PRODUCTION        USE." 
extendedKeyUsage  = serverAuth, clientAuth 

[ req_dn ] 
countryName = Country Name (2 letter code) 
countryName_default = IN 

countryName_min = 2 
countryName_max = 2 

stateOrProvinceName = State or Province Name (full name) 
stateOrProvinceName_default = Pune 
stateOrProvinceName_max = 64 

localityName = Locality Name (eg, city) 
localityName_default = Pune 
localityName_max = 64 

organizationName = Organization Name (eg, company) 
organizationName_default = TestComp 
organizationName_max = 64 

organizationalUnitName = Organizational Unit Name (eg, section) 
organizationalUnitName_default = TestComp 
organizationalUnitName_max = 64 

commonName = Common Name (eg, YOUR name) 
commonName_max = 64 

[ v3_ca ] 
# Extensions for a typical CA 

subjectKeyIdentifier=hash 
basicConstraints = critical,CA:true 
authorityKeyIdentifier=keyid:always,issuer:always