[req]
distinguished_name = distinguished_name_sec
attributes         = attributes_sec
prompt             = no

[attributes_sec]

[distinguished_name_sec]
CN = CanoKeys FIDO Attestation Root CA No.1

[ca_extensions_sec]
subjectKeyIdentifier = hash
basicConstraints     = CA:TRUE, pathlen:0
keyUsage             = critical, cRLSign, keyCertSign