| [ req ] | |
| default_bits = 4096 | |
| distinguished_name = req_distinguished_name | |
| prompt = no | |
| string_mask = utf8only | |
| x509_extensions = myexts | |
| [ req_distinguished_name ] | |
| #O = Unspecified company | |
| CN = Build time autogenerated kernel key | |
| #emailAddress = unspecified.user@unspecified.company | |
| [ myexts ] | |
| basicConstraints=critical,CA:FALSE | |
| keyUsage=digitalSignature | |
| subjectKeyIdentifier=hash | |
| authorityKeyIdentifier=keyid |