[req]
default_bits = 2048
prompt = no
default_md = sha256
distinguished_name = dn
req_extensions = v3_req
x509_extensions = v3_req

[dn]
C = GH
ST = Accra
L = Accra
O = Essence
OU = Medical Services
CN = clinic.local

[v3_req]
subjectKeyIdentifier = hash
authorityKeyIdentifier = keyid:always,issuer
basicConstraints = critical, CA:FALSE
keyUsage = critical, digitalSignature, keyEncipherment
extendedKeyUsage = serverAuth, clientAuth
subjectAltName = @alt_names

[alt_names]
DNS.1 = clinic.local
DNS.2 = localhost
DNS.3 = *.clinic.local
IP.1 = 192.168.1.2
IP.2 = 127.0.0.1