1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16
[ req ] default_bits = 3072 distinguished_name = req_distinguished_name prompt = no x509_extensions = myexts [ req_distinguished_name ] O = The CentOS Project CN = CentOS Stream kernel signing key emailAddress = security@centos.org [ myexts ] basicConstraints=critical,CA:FALSE keyUsage=digitalSignature subjectKeyIdentifier=hash authorityKeyIdentifier=keyid