1[ req ]
 2default_bits = 4096
 3distinguished_name = req_distinguished_name
 4prompt = no
 5string_mask = utf8only
 6x509_extensions = myexts
 7
 8[ req_distinguished_name ]
 9#O = Unspecified company
10CN = Build time autogenerated kernel key
11#emailAddress = unspecified.user@unspecified.company
12
13[ myexts ]
14basicConstraints=critical,CA:FALSE
15keyUsage=digitalSignature
16subjectKeyIdentifier=hash
17authorityKeyIdentifier=keyid