| #openssl x509 extfile params | |
| extensions = extend | |
| # This prevent the user to be prompted for values | |
| prompt = no | |
| distinguished_name = dn-param | |
| [dn-param] # DN fields | |
| CN = Test CI | |
| OU = TESTCERT | |
| O = RSPTEST | |
| C = IT | |
| # Extensions for the Test CI | |
| [extend] # openssl extensions | |
| subjectKeyIdentifier = hash | |
| basicConstraints = critical, CA:true | |
| certificatePolicies=critical,2.23.146.1.2.1.0 | |
| keyUsage =critical, keyCertSign, cRLSign | |
| subjectAltName = RID:2.999.1 | |
| crlDistributionPoints=URI:http://ci.test.example.com/CRL-A.crl, URI:http://ci.test.example.com/CRL-B.crl |