63fe04
[ req ]
63fe04
default_bits = 3072
63fe04
distinguished_name = req_distinguished_name
63fe04
prompt = no
63fe04
x509_extensions = myexts
63fe04
63fe04
[ req_distinguished_name ]
63fe04
O = The CentOS Project
63fe04
CN = CentOS Stream kernel signing key
63fe04
emailAddress = security@centos.org
63fe04
63fe04
[ myexts ]
63fe04
basicConstraints=critical,CA:FALSE
63fe04
keyUsage=digitalSignature
63fe04
subjectKeyIdentifier=hash
63fe04
authorityKeyIdentifier=keyid