ca.config

[ req ]
default_bits        = 2048
distinguished_name  = dn
x509_extensions     = san
req_extensions      = san
extensions          = san
prompt              = no

[ ca ]
default_ca = ca_default

[ ca_default ]
private_key   = root-ca-key.pem
certificate   = root-ca.pem
new_certs_dir = new_certs
database      = root-ca.index
default_md    = sha256
serial        = root-ca.serial
email_in_dn   = no
default_days  = 365
policy        = policy

[ policy ]
countryName             = optional
stateOrProvinceName     = optional
localityName            = optional
organizationName        = optional
organizationalUnitName  = optional
commonName              = supplied

[ dn ]
countryName         = US
stateOrProvinceName = CA
localityName        = San Francisco
organizationName    = Wholesome Certifications Inc.
commonName          = wholesomecertifications.com
emailAddress        = support@wholesomecertifications.com

[ san ]
basicConstraints     = CA:TRUE
subjectAltName       = @alt_names
subjectKeyIdentifier = hash

[ alt_names ]
DNS.1 = *.wholesomecertifications.com
DNS.2 = *.wholesomecerts.com