[ req ]
distinguished_name	= req_dn
x509_extensions		= req_x509_ext
prompt			= no
default_md		= sha256

[ req_dn ]
CN			= Test Certificate Alice Root

[ req_x509_ext ]
basicConstraints	= CA:true
subjectKeyIdentifier	= hash
authorityKeyIdentifier	= keyid:always