csr.txt.dist

# OpenSSL configuration file for creating a CSR for a server certificate
# Adapt at least the FQDN and ORGNAME lines, and then run 
# openssl req -new -config myserver.cnf -keyout myserver.key -out myserver.csr
# on the command line.

# state as 2 letter code
COUNTRY = CH

# state
STATE = Bern

# the name of your location
LOCATION = Anywhere

# the name of your organization
ORGNAME = My company

# the name of your organization unit
UNITNAME = Department for magic things



# --- no modifications required below ---

# the fully qualified server (or service) name
FQDN = __FQDN__

# subjectAltName entries: to add DNS aliases to the CSR, delete
ALTNAMES = __ALTNAMES__


[ req ]
default_bits = 2048
prompt = no
encrypt_key = no
default_md = sha256
distinguished_name = dn
req_extensions = req_ext


[ dn ]
C = $COUNTRY
ST = $STATE
L = $LOCATION
O = $ORGNAME
OU = $UNITNAME
CN = $FQDN
# emailAddress=webmaster@example.com

[ req_ext ]
subjectAltName = $ALTNAMES