[ req_distinguished_name ] [ req ] distinguished_name = req_distinguished_name req_extensions = v3_req [ v3_req ] keyUsage = nonRepudiation, digitalSignature, keyEncipherment subjectAltName=DNS:ssl.srgb888.ga