[req]
default_bits = 4096
prompt = no
default_md = sha256
req_extensions = v3_req
distinguished_name = dn

[ dn ]
C=US
ST=All
L=All
O=pgBackRest
OU=Unit Testing Domain
CN = s3.us-east-1.amazonaws.com

[ v3_req ]
basicConstraints = CA:FALSE
keyUsage = nonRepudiation, digitalSignature, keyEncipherment
subjectAltName = @alt_names

[ alt_names ]
DNS.1 = s3.us-east-1.amazonaws.com
DNS.2 = *.s3.us-east-1.amazonaws.com
DNS.3 = s3.us-east-2.amazonaws.com
DNS.4 = *.s3.us-east-2.amazonaws.com