# Automatically generated, do not edit.

[ ca ]
default_ca = ca_default

[ ca_default ]
certificate = ISP3.cer
serial = ISP3/serial
private_key = ISP3.key
database = ISP3/index
new_certs_dir = ISP3
name_opt = ca_default
cert_opt = ca_default
default_days = 365
default_crl_days = 30
default_md = sha256
preserve = no
copy_extensions = copy
policy = ca_policy_anything
unique_subject = no
x509_extensions = ca_x509_ext
crl_extensions = crl_x509_ext

[ ca_policy_anything ]
countryName = optional
stateOrProvinceName = optional
localityName = optional
organizationName = optional
organizationalUnitName = optional
commonName = supplied
emailAddress = optional
givenName = optional
surname = optional

[ req ]
default_bits = 2048
encrypt_key = no
distinguished_name = req_dn
req_extensions = req_x509_ext
prompt = no

[ req_dn ]
CN = TEST ENTITY ISP3

[ req_x509_ext ]
basicConstraints = critical,CA:true
subjectKeyIdentifier = hash
keyUsage = critical,keyCertSign,cRLSign
subjectInfoAccess = 1.3.6.1.5.5.7.48.5;URI:rsync://wombats-r-us.hactrn.net/ISP3/
authorityInfoAccess = caIssuers;URI:rsync://wombats-r-us.hactrn.net/LIR2.cer
#sbgp-autonomousSysNum = critical,???
sbgp-ipAddrBlock = critical,IPv6:2001:db8::44-2001:db8::100

[ ca_x509_ext ]
basicConstraints = critical,CA:true
authorityKeyIdentifier = keyid:always
keyUsage = critical,keyCertSign,cRLSign
subjectInfoAccess = 1.3.6.1.5.5.7.48.5;URI:rsync://wombats-r-us.hactrn.net/ISP3/
authorityInfoAccess = caIssuers;URI:rsync://wombats-r-us.hactrn.net/LIR2.cer
#sbgp-autonomousSysNum = critical,???
sbgp-ipAddrBlock = critical,IPv6:2001:db8::44-2001:db8::100

[ crl_x509_ext ]
authorityKeyIdentifier = keyid:always