oid_section = new_oids
[ new_oids ]

[ req ]
distinguished_name = req_distinguished_name
encrypt_key = no
string_mask = nombstr
prompt = no
req_extensions = v3_ca
x509_extensions = v3_ca

[ req_distinguished_name ]
OU = lighttpd2 test suite CA
CN = lighttpd2 test suite Authority

[ v3_ca ]
subjectKeyIdentifier=hash
authorityKeyIdentifier=keyid:always,issuer:always
basicConstraints = critical,CA:true
keyUsage=critical,keyCertSign,cRLSign
nsCertType=sslCA, emailCA, objCA