# default settings for our example. see chapter 3 section 3 for more details[ ca ]default_ca	= exampleca[ exampleca ]dir              = CAcertificate      = root.pemdatabase         = $dir/index.txtnew_certs_dir    = $dir/certsprivate_key      = $dir/private/cakey.pemserial           = $dir/serial default_crl_days = 7default_days     = 365default_md       = sha1 policy           = exampleca_policyx509_extensions  = certificate_extensions [ exampleca_policy ]commonName             = suppliedstateOrProvinceName    = suppliedcountryName            = suppliedemailAddress           = suppliedorganizationName       = suppliedorganizationalUnitName = optional [ req ]default_bits		= 2048default_keyfile 	= privkey.pemdefault_md              = sha1prompt                  = nodistinguished_name	= req_distinguished_namex509_extensions		= req_extensions# the following sections are specific to the request we're building[ certificate_extensions ]basicConstraints = CA:truesubjectKeyIdentifier=hash#authorityKeyIdentifier=keyid:always,issuer:always[ req_distinguished_name ]countryName         = USstateOrProvinceName = CalifornialocalityName        = FairfieldorganizationName    = H&S Enterprise Readiness, Inc.commonName          = Client CertificateemailAddress        = ssladmin@hanks-snyder.com[ req_extensions ]basicConstraints = CA:true