config.json

{
  "signing": {
    "default": {
      "ocsp_url": "http://ocsp.example.com/ocsp",
      "crl_url": "http://crl.example.com/crl/list.crl",
      "expiry": "8760h",
      "usages": [
        "signing",
        "key encipherment",
        "client auth",
        "server auth"
      ]
    },

    "profiles": {
      "intermediate-ca": {
        "expiry": "87600h",
        "usages": ["digital signature","cert sign","crl sign"],
        "ca_constraint": {
          "is_ca": true,
          "max_path_len": 0,
          "max_path_len_zero": true
        }
      },

      "server": {
        "expiry": "43800h",
        "usages": [
          "signing",
          "key encipherment",
          "server auth",
          "client auth"
        ]
      },

      "client": {
        "expiry": "43800h",
        "usages": [
          "signing",
          "key encipherment",
          "client auth"
        ]
      }

    }
  }
}