distinguished_name = req_distinguished_name

[req_distinguished_name]

[req_sign]
subjectKeyIdentifier=hash
basicConstraints = CA:FALSE
keyUsage = digitalSignature
extendedKeyUsage = codeSigning