1[req] 2distinguished_name = req_distinguished_name 3req_extensions = v3_req 4prompt = no 5 6[req_distinguished_name] 7CN = testclient3 8 9[v3_req] 10basicConstraints = CA:FALSE 11keyUsage = nonRepudiation, digitalSignature, keyEncipherment 12subjectAltName = @alt_names 13 14[alt_names] 15URI = spiffe://foo.com/bar/baz 16