[ req ]
default_bits = 2048
default_keyfile = ca_key.pem
encrypt_key = no
default_md = sha256
prompt=no
distinguished_name=CA
x509_extensions=v3_ca
[ CA ]
C = US
ST = New York
L = Gotham
O = Gotham
OU = WWW
CN = Gotham Test CA
[ v3_ca ]
subjectKeyIdentifier=hash
authorityKeyIdentifier=keyid:always,issuer:always
basicConstraints = CA:true