[req] distinguished_name = root_ca_dn prompt = no default_md = sha512 x509_extensions = root_ca string_mask = utf8only [root_ca_dn] countryName = US organizationName = Dustin C. Hatch organizationalUnitName = Loki commonName = Loki CA [root_ca] subjectKeyIdentifier = hash basicConstraints = critical,CA:true,pathlen:0 keyUsage = cRLSign, keyCertSign