authorityKeyIdentifier=keyid,issuer basicConstraints=CA:FALSE keyUsage = digitalSignature, nonRepudiation, keyEncipherment, dataEncipherment subjectAltName = @alt_names [alt_names] DNS.1 = lesspass.local DNS.2 = www.lesspass.local DNS.3 = api.lesspass.local DNS.4 = admin.lesspass.local