authorityKeyIdentifier=keyid,issuer
basicConstraints=CA:FALSE
keyUsage = digitalSignature, nonRepudiation, keyEncipherment, dataEncipherment
#extendedKeyUsage = clientAuth, serverAuth
subjectAltName = @alt_names

[alt_names]
#DNS.1 = localhost
#IP.1 = 127.0.0.1
# For client/replica members of agnav.com
DNS.1 = *.agnav.com