[ req ]
default_md = sha1
distinguished_name = req_distinguished_name

[ req_distinguished_name ]
countryName 			= Zkratka Zeme (2 znaky)
countryName_default 		= CZ
stateOrProvinceName 		= Zeme (cele jmeno)
stateOrProvinceName_default 	= Czech Republic
countryName_min 		= 2
countryName_max 		= 2
localityName 			= Mesto
localityName_default 		= Mlada Boleslav
organizationName 		= Firma
organizationName_default 	= Nazev Firmy
emailAddress			= admin@domain.cz
commonName 			= Smart CA
commonName_max 			= 64
default_days   			= 3650
default_crl_days		= 30

[ certauth ]
subjectKeyIdentifier = hash
authorityKeyIdentifier = keyid:always,issuer:always
basicConstraints = CA:true
crlDistributionPoints = @crl

[ server ]
basicConstraints = CA:FALSE
keyUsage = digitalSignature, keyEncipherment, dataEncipherment
extendedKeyUsage = serverAuth
nsCertType = server
crlDistributionPoints = @crl

[ client ]
basicConstraints = CA:FALSE
keyUsage = digitalSignature, keyEncipherment, dataEncipherment
extendedKeyUsage = clientAuth
nsCertType = client
crlDistributionPoints = @crl

[ crl ]
URI=http://testca.local/ca.crl