dir = /var/www/sites/www.reliableid.com/stub/upload/62
signdir = /home/phadley/hardtoget//webvivos/4/certs
id = 62
##Configuration file for stub certificates adapted by PKH from http://www.openssl.org/docs/apps/ca.html#
##It is anticipated that it will be appended to a short file with appropriate parameters
##	id=the enrollee id for the certificate, it will be the directory
##	signdir=stash of the signing certificates and its support
##	dir=directory for the current certificate stuff
 [ ca ]
 default_ca      = CA_default            # The default ca section
 
 [ CA_default ]

 database       = $signdir/index.txt        # index file.
 new_certs_dir  = $signdir/newcerts         # new certs dir
 
 certificate    = $signdir/root.pem       # The CA cert
 serial         = $dir/serial           # serial no file
 private_key    = $signdir/rootkey.pem	# CA private key
 RANDFILE       = $signdir/.rand    # random number file
 
 default_days   = 23					# how long to certify for
 default_crl_days= 30                   # how long before next CRL
 default_md     = md5                   # md to use

 policy         = policy_any            # default policy
 email_in_dn    = yes                   # preferred in the extensions but this is for the provisiohal certificate

 name_opt       = ca_default            # Subject name display option
 cert_opt       = ca_default            # Certificate display option
 copy_extensions = none                 # Don't copy extensions from request

 [ policy_any ]
 countryName            = optional
 stateOrProvinceName    = optional
 organizationName       = optional
 organizationalUnitName = optional
 commonName             = optional
 emailAddress           = required
 first					= optional
 surname				= required
