[ req ]
prompt = no
encrypt_key = no

distinguished_name = sec0
req_extensions = sec2

[ sec0 ]
O=DOMAIN.EXAMPLE.COM
CN=testuser

[ sec1 ]
email = testuser@example.com

[ sec2 ]
subjectAltName = @sec1