[ca] default_ca = default [default] dir = . new_certs_dir = $dir/cert private_key = $dir/key policy = policy_any [policy_any] countryName = supplied stateOrProvinceName = optional organizationName = optional organizationalUnitName = optional commonName = supplied emailAddress = optional [req] distinguished_name = req_dname prompt = no x509_extensions = v3_ca [req_dname] CN = Bound Certificate for <имя разработчика> C = <Две буквы названия страны - RU, UA и т. д.> O = MotoFan.Ru OU = <Город, в котором живёшь> [v3_ca] subjectKeyIdentifier = hash basicConstraints = critical,CA:true keyUsage = critical,digitalSignature,keyCertSign