[v3_ca] basicConstraints = CA:FALSE nsCertType = server nsComment = "Web Server Certificate" subjectKeyIdentifier = hash authorityKeyIdentifier = keyid,issuer:always keyUsage = critical, digitalSignature, keyEncipherment extendedKeyUsage = serverAuth subjectAltName = @alt_names [ alt_names ] DNS.1 = orpheus.syscid.com DNS.2 = auth.syscid.com DNS.3 = www.syscid.com DNS.4 = sso.syscid.com