openssl.cnf

oid_section = oids

[ req ]
default_bits = 3072
default_md = sha256
distinguished_name = dn
encrypt_key = no
prompt = no
req_extensions = req_ext
x509_extensions = x509_ext

[ oids ]
uri=2.5.4.83
agidcert=1.3.76.16.6
spid-publicsector-SP=1.3.76.16.4.2.1
spid-privatesector-SP=1.3.76.16.4.3.1

[ dn ]
organizationName=Organization Name
commonName=Organization Display Name
uri=https://localhost
organizationIdentifier=PA:IT-code
countryName=IT
localityName=Locality
stateOrProvinceName=State
organizationalUnitName=Organizational Unit
emailAddress=info@localhost

[ req_ext ]

[ x509_ext ]
basicConstraints = CA:FALSE
keyUsage = critical, nonRepudiation, digitalSignature
certificatePolicies = @agid_policies,@spid_policies

[ agid_policies ]
policyIdentifier = agidcert
userNotice = @agidcert_notice

[ agidcert_notice ]
explicitText = "agIDcert"

[ spid_policies ]
policyIdentifier = spid-publicsector-SP