[ req ]
default_bits = 1024
encrypt_key = yes
distinguished_name = req_dn
x509_extensions = cert_type
prompt = no

[ req_dn ]
# country (2 letter code)
C=CA

# State or Province Name (full name)
ST=Province

# Locality Name (eg. city)
L=City

# Organization (eg. company)
O=Organization name

# Organizational Unit Name (eg. section)
OU=IMAP server

# Common Name (*.example.com is also possible)
CN=*.domain.tld

# E-mail contact
emailAddress=postmaster@domain.tld

[ cert_type ]
nsCertType = server