| authorityKeyIdentifier=keyid,issuer | |
| basicConstraints=CA:FALSE | |
| keyUsage = digitalSignature, nonRepudiation, keyEncipherment, dataEncipherment | |
| subjectAltName = @alt_names | |
| [alt_names] | |
| {% for name in all_simulated_hosts -%} | |
| DNS.{{ loop.index }} = {{ name }} | |
| {% endfor %} |