| [ req ] | |
| default_bits = 3072 | |
| distinguished_name = req_distinguished_name | |
| prompt = no | |
| x509_extensions = myexts | |
| [ req_distinguished_name ] | |
| O = Rocky | |
| CN = Rocky kernel signing key | |
| emailAddress = security@rockylinux.org | |
| [ myexts ] | |
| basicConstraints=critical,CA:FALSE | |
| keyUsage=digitalSignature | |
| subjectKeyIdentifier=hash | |
| authorityKeyIdentifier=keyid |