client.config

[ req ]
default_bits        = 2048
distinguished_name  = dn
x509_extensions     = client_ext
req_extensions      = client_ext
extensions          = client_ext
prompt              = no

[ ca ]
default_ca = ca_default

[ ca_default ]
private_key   = root-ca-key.pem
certificate   = root-ca.pem
new_certs_dir = new_certs
database      = root-ca.index
default_md    = sha256
serial        = root-ca.serial
email_in_dn   = no
default_days  = 365
policy        = policy

[ policy ]
countryName             = optional
stateOrProvinceName     = optional
localityName            = optional
organizationName        = optional
organizationalUnitName  = optional
commonName              = supplied

[ dn ]
countryName         = US
stateOrProvinceName = CA
localityName        = San Francisco
organizationName    = Wholesome Computing Inc.
commonName          = client.wholesomecomputing.com
emailAddress        = support@wholesomecomputing.com

[ client_ext ]
basicConstraints     = CA:FALSE
subjectAltName       = @alt_names
subjectKeyIdentifier = hash

[ alt_names ]
DNS.1 = *.wholesomecomputing.com