[req]
distinguished_name  = req_distinguished_name
req_extensions     = v3_req
prompt = no

[req_distinguished_name]
CN = testclient3

[v3_req]
basicConstraints = CA:FALSE
keyUsage = nonRepudiation, digitalSignature, keyEncipherment
subjectAltName = @alt_names

[alt_names]
URI = spiffe://foo.com/bar/baz