authorityKeyIdentifier=keyid,issuer basicConstraints=CA:FALSE keyUsage = digitalSignature, nonRepudiation, keyEncipherment, dataEncipherment subjectAltName = @alt_names [ alt_names ] DNS.1 = myserver.local DNS.2 = www.myserver.local IP.1 = 127.0.0.1