[ ca ] default_ca = CA_default [ CA_default ] dir = . database = $dir/index.txt crlnumber = $dir/crlnumber certificate = $dir/ca.cert.pem private_key = $dir/ca.key.pem default_md = sha256 default_crl_days = 3650 policy = policy_any crl_extensions = crl_ext [ policy_any ] commonName = supplied [ crl_ext ] authorityKeyIdentifier=keyid:always