1[req] 2distinguished_name = req_distinguished_name 3attributes = req_attributes 4 5[req_distinguished_name] 6 7[req_attributes] 8 9[test_client] 10basicConstraints = critical,CA:FALSE 11subjectKeyIdentifier = hash 12keyUsage = critical,nonRepudiation,digitalSignature,keyEncipherment 13extendedKeyUsage = critical,clientAuth 14subjectAltName = @alt_names 15 16[alt_names] 17URI = spiffe://foo.bar.com/client/workload/1