+sighash=SHA256
+crl_url=http://crl.example.net/latest.crl
+signer=Signing Cert rsa
+ocsp_url=http://oscp.example.net/
+ocsp_signer=OCSP Signer rsa
+ocsp_url=http://oscp.example.net/
+
+[CA]
+name=Certificate Authority rsa
+bits=2048
+subject=clica CA
+org=example.net