authorityKeyIdentifier=keyid,issuer
basicConstraints=CA:FALSE
keyUsage = digitalSignature, nonRepudiation, keyEncipherment, dataEncipherment
#extendedKeyUsage = clientAuth, serverAuth
subjectAltName = @alt_names

[alt_names]
# For localhost
DNS.1 = localhost
IP.1 = 127.0.0.1

# For client of agnav
#DNS.1 = *.agnav.com