[req] distinguished_name = req_distinguished_name req_extensions = v3_req [req_distinguished_name] countryName = Country Name (2 letter code) countryName_default = CN stateOrProvinceName = State or Province Name (full name) stateOrProvinceName_default = BJ localityName = Locality Name (eg, city) localityName_default = Beijing organizationalUnitName = Organizational Unit Name (eg, section) organizationalUnitName_default = TUNA commonName = Common Name (server FQDN or domain name) commonName_default = localhost commonName_max = 64 [v3_req] # Extensions to add to a certificate request basicConstraints = CA:FALSE keyUsage = nonRepudiation, digitalSignature, keyEncipherment subjectAltName = @alt_names [alt_names] DNS.1 = localhost # DNS.2 = manager.localhost DNS.2 = worker.localhost