# end-entity Server certificate
[ req ]
prompt                 = no
days                   = 365
default_md             = sha256
distinguished_name     = req_distinguished_name
req_extensions         = v3_req # This only affects the CSR

[ req_distinguished_name ]
countryName            = DE
stateOrProvinceName    = Bavaria
localityName           = Munich
organizationName       = Dipl. Phys. Peer Stritzinger Gmbh
organizationalUnitName = Developement
commonName             = opcua_server
emailAddress           = opcua_server@stritzinger.com

[ v3_req ]
basicConstraints = critical, CA:FALSE
subjectKeyIdentifier = hash
keyUsage = critical, nonRepudiation, digitalSignature, keyEncipherment, keyAgreement
# Only for TLS WWW servers, otp by default does not recognise it.
#extendedKeyUsage = critical, serverAuth
subjectAltName = @alt_names

[ alt_names ]
IP.0 = 127.0.0.1
DNS.0 = localhost
URI.0 = urn:stritzinger:opcua:erlang:server
email.0 = opcua_server@localhost