1[req] 2distinguished_name = req_distinguished_name 3req_extensions = v3_req 4prompt = no 5 6[req_distinguished_name] 7CN = intermediatecert.example.com 8 9[v3_req] 10keyUsage = critical, digitalSignature, keyEncipherment, keyCertSign 11extendedKeyUsage = clientAuth, serverAuth 12basicConstraints = critical, CA:true 13