[req]
default_bits       = 2048
default_keyfile    = localhost.key
distinguished_name = req_distinguished_name
req_extensions     = req_ext
x509_extensions    = v3_ca

[req_distinguished_name]
countryName                 = Country Name (2 letter code)
countryName_default         = US
stateOrProvinceName         = State or Province Name (full name)
stateOrProvinceName_default = Arizona
localityName                = Locality Name (eg, city)
localityName_default        = Mesa
organizationName            = Organization Name (eg, company)
organizationName_default    = Infineon Technologies Americas Corp.
organizationalUnitName      = organizationalunit
organizationalUnitName_default = Development
commonName                  = Common Name (e.g. server FQDN or YOUR name)
commonName_default          = ISCN5CG1325C0X.infineon.com
commonName_max              = 64

[req_ext]
subjectAltName = @alt_names

[v3_ca]
subjectAltName = @alt_names

[alt_names]
DNS.1   = ISCN5CG1325C0X.infineon.com
DNS.2   = ISCN5CG1325C0X
DNS.3   = localhost
DNS.4   = 127.0.0.1

# https://webscoot.io/blog/create-self-signed-certificate-ubuntu-windows-nginx/
# cd "C:\Program Files\DevOps\Mesa_FI\usr\bin"
# openssl
# req -x509 -nodes -days 365 -newkey rsa:2048 -keyout L:\DevOps\Mesa_FI\NGINX-Conf\conf\includes\localhost.key -out L:\DevOps\Mesa_FI\NGINX-Conf\conf\includes\localhost.crt -config L:\DevOps\Mesa_FI\NGINX-Conf\conf\includes\localhost.conf
# openssl
# req -newkey rsa:2048 -keyout L:\DevOps\Mesa_FI\NGINX-Conf\conf\includes\localhost.key -out L:\DevOps\Mesa_FI\NGINX-Conf\conf\includes\certificate-signing-request.csr -config L:\DevOps\Mesa_FI\NGINX-Conf\conf\includes\localhost.conf
# https://intranet.infineon.com/
# openssl
# pkcs12 -in L:\DevOps\Mesa_FI\NGINX-Conf\conf\includes\ec-server.pfx -nocerts -out L:\DevOps\Mesa_FI\NGINX-Conf\conf\includes\ec-server.key
# openssl
# pkcs12 -in L:\DevOps\Mesa_FI\NGINX-Conf\conf\includes\ec-server.pfx -clcerts -nokeys -out L:\DevOps\Mesa_FI\NGINX-Conf\conf\includes\ec-server.crt