1SUBJECT_NAME = req_dn 2KEY_SIZE = 2048 3 4[req] 5default_bits = ${ENV::KEY_SIZE} 6default_md = sha256 7string_mask = utf8only 8prompt = no 9encrypt_key = no 10distinguished_name = ${ENV::SUBJECT_NAME} 11req_extensions = req_extensions 12 13[req_dn] 14C = US 15ST = California 16L = Mountain View 17O = QUIC Server 18CN = 127.0.0.1 19 20[req_extensions] 21subjectAltName = @other_hosts 22 23[other_hosts] 24DNS.1 = www.example.org 25DNS.2 = mail.example.org 26DNS.3 = mail.example.com 27IP.1 = 127.0.0.1 28 29