[ req ]
default_bits        = 4096
default_keyfile     = server-key.pem
distinguished_name  = dn
#req_extensions      = v3_req
x509_extensions     = v3_req
string_mask         = utf8only
prompt              = no
default_md          = sha256

[ dn ]

countryName = PL
localityName = Krakow
organizationName = Samsung
commonName = registry-1.docker.io
#emailAddress

[ v3_req ]

#subjectKeyIdentifier        = hash
#authorityKeyIdentifier  = keyid,issuer

basicConstraints        = CA:FALSE
keyUsage            = critical, keyAgreement, nonRepudiation, digitalSignature, keyEncipherment
extendedKeyUsage    = serverAuth
# does not work here because of bug in openssl
#subjectAltName          = @alternate_names
nsComment           = "OpenSSL Generated Certificate"

#[ alternate_names ]

#DNS.4       = ftp.example.com