854c564
[ req ]
854c564
default_bits = 3072
854c564
distinguished_name = req_distinguished_name
854c564
prompt = no
854c564
x509_extensions = myexts
854c564
854c564
[ req_distinguished_name ]
854c564
O = The CentOS Project
854c564
CN = CentOS Stream kernel signing key
854c564
emailAddress = security@centos.org
854c564
854c564
[ myexts ]
854c564
basicConstraints=critical,CA:FALSE
854c564
keyUsage=digitalSignature
854c564
subjectKeyIdentifier=hash
854c564
authorityKeyIdentifier=keyid