localhost.conf

# TLS certificate configuration for the localhost leaf certificate.
# This cert is signed by the self-signed CA defined in ca.conf.

[req]
prompt                  = no
default_bits            = 2048
distinguished_name      = subject
req_extensions          = req_ext
x509_extensions         = x509_ext

[subject]
commonName              = localhost

[req_ext]
basicConstraints        = critical, CA:false
subjectAltName          = @alt_names

[x509_ext]
basicConstraints        = critical, CA:false
keyUsage                = critical, digitalSignature, keyEncipherment
extendedKeyUsage        = critical, serverAuth
subjectAltName          = critical, @alt_names
1.3.6.1.4.1.311.84.1.1 = ASN1:UTF8String:ASP.NET Core HTTPS development certificate # Needed to get it imported by dotnet dev-certs

[alt_names]
DNS.1                   = localhost