[ req ] default_bits = 4096 prompt = no encrypy_key = no default_md = sha256 distinguished_name = dn req_extensions = req_ext [ dn ] # you can choose to use a wildcard or not #CN = *.yourdomain.com CN = yourdomain.com O = Your Domain OU = Your Domain L = Los Angeles ST = California C = EU [ req_ext ] subjectAltName = DNS: *.yourdomain.com, DNS: yourdomain.com