> On 20 Mar 2020, at 22:12, Salz, Rich via openssl-users
> <[email protected]> wrote:
>
> The doc/man5/config.pod file says to use
> 1.OU = “My first OU”
> 2.OU = “My second OU”
>
> But doc/man5/x509v3_config.pod says to append the numeric, as in
> email.1 = steve@here
> email.2 = steve@there
>
> I believe the second form is correct. Can anyone confirm?
AFAIK: Either simply like (e.g. in an extension file):
subjectAltName=email:foo@x,email:bar@x
or more listed like your second form:
[ v3_req ]
subjectAltName = @extrabits
[ extrabits ]
email.1=foo
email.2=foo
or straight (ordered) directly:
openssl req -x509 -subj /CN=foo/CN=bar -keyout /dev/null -nodes|
openssl x509 -noout -subject
Dw.
