2 distinguished_name = req_distinguished_name
3 x509_extensions = v3_ca
5 basicConstraints = critical,CA:true,pathlen:3
6 keyUsage = keyCertSign,cRLSign
7 subjectKeyIdentifier = hash
8 authorityKeyIdentifier = keyid:always,issuer:always
9 [ req_distinguished_name ]
10 O = Unique organization name
11 OU = Organization unit
12 CN = Entity and dnQualifier