[ req ]
default_md				= sha1
string_mask				= utf8only
utf8					= yes
distinguished_name		= req_dn
req_extensions			= req_ext
attributes				= req_attribs
x509_extensions			= x509_ext
[ req_dn ]

[ req_ext ]

[ req_attribs ]

[ x509_ext ]
subjectKeyIdentifier	= hash
authorityKeyIdentifier	= keyid:always

[ ca ]
default_ca				= acme_ca

[ acme_ca ]
database				= db/ca.db
serial					= db/serial.txt
unique_subject			= no
email_in_dn				= no
policy					= ca_policy_any
default_days			= 30
default_md				= sha1
x509_extensions			= x509_ext

[ ca_policy_any ]
countryName				= optional
stateOrProvinceName		= optional
organizationName		= supplied
organizationalUnitName	= optional
commonName				= supplied
emailAddress			= optional
