[ req ]
distinguished_name = req_distinguished_name
extensions = v3_int_ca
req_extensions = v3_int_ca

[ req_distinguished_name ]
commonName = intermediateCA
commonName_default = intermediateCA

[ v3_int_ca ]
# Extensions for a typical intermediate CA (`man x509v3_config`).
subjectKeyIdentifier = hash
basicConstraints = critical, CA:TRUE, pathlen:0
authorityKeyIdentifier = keyid
keyUsage = critical, keyCertSign
extendedKeyUsage = serverAuth