1[ req ] 2default_bits = 4096 3distinguished_name = req_distinguished_name 4prompt = no 5string_mask = utf8only 6x509_extensions = myexts 7 8[ req_distinguished_name ] 9#O = Unspecified company 10CN = Build time autogenerated kernel key 11#emailAddress = unspecified.user@unspecified.company 12 13[ myexts ] 14basicConstraints=critical,CA:FALSE 15keyUsage=digitalSignature 16subjectKeyIdentifier=hash 17authorityKeyIdentifier=keyid 18