#
# Use with the following command
# $ openssl req -new -x509 -outform DER -out self-signed-with-eku.pem \
#    -newkey rsa -keyout self-signed-with-eku.key -nodes \
#    -config with-eku.conf -set_serial 888 -extensions v3_ca
#

[ req ]
default_bits           = 1024
distinguished_name     = req_distinguished_name
x509_extensions        = v3_ca
dirstring_type = nobmp

[ req_distinguished_name ]
commonName                     = Common Name
commonName_max                 = 64

[ v3_ca ]
extendedKeyUsage=clientAuth,emailProtection,1.2.3.4