1 [v3_extensions]

     2 extendedKeyUsage = serverAuth,clientAuth

     3 keyUsage = digitalSignature,keyEncipherment

     4 basicConstraints = CA:FALSE

     5 subjectAltName = @subject_alternative_name

     6 

     7 [subject_alternative_name]

     8 DNS.0 = localhost

     9 otherName.0 = 1.3.6.1.5.5.7.8.7;IA5STRING:_xmpp-client.localhost

    10 otherName.1 = 1.3.6.1.5.5.7.8.7;IA5STRING:_xmpp-server.localhost

    11 otherName.2 = 1.3.6.1.5.5.7.8.5;FORMAT:UTF8,UTF8:localhost

    12 

    13 [distinguished_name]

    14 countryName = GB

    15 organizationName = Prosody IM

    16 organizationalUnitName = http://prosody.im/doc/certificates

    17 commonName = Example certificate

    18 

    19 [req]

    20 prompt = no

    21 x509_extensions = v3_extensions

    22 req_extensions = v3_extensions

    23 distinguished_name = distinguished_name

    24