| OLD | NEW |
| 1 [req] | 1 [req] |
| 2 default_bits = 2048 | 2 default_bits = 2048 |
| 3 default_md = sha1 | 3 default_md = sha256 |
| 4 string_mask = utf8only | 4 string_mask = utf8only |
| 5 prompt = no | 5 prompt = no |
| 6 encrypt_key = no | 6 encrypt_key = no |
| 7 distinguished_name = req_dn | 7 distinguished_name = req_dn |
| 8 | 8 |
| 9 [req_dn] | 9 [req_dn] |
| 10 C = US | 10 C = US |
| 11 ST = California | 11 ST = California |
| 12 L = Mountain View | 12 L = Mountain View |
| 13 O = Test CA | 13 O = Test CA |
| 14 CN = 127.0.0.1 | 14 CN = 127.0.0.1 |
| 15 | 15 |
| 16 [crit-codeSigning] | 16 [crit-codeSigning] |
| 17 subjectAltName = IP:127.0.0.1 | 17 subjectAltName = IP:127.0.0.1 |
| 18 basicConstraints = critical, CA:false | 18 basicConstraints = critical, CA:false |
| 19 subjectKeyIdentifier = hash | 19 subjectKeyIdentifier = hash |
| 20 extendedKeyUsage = critical, codeSigning | 20 extendedKeyUsage = critical, codeSigning |
| 21 | 21 |
| 22 [non-crit-codeSigning] | 22 [non-crit-codeSigning] |
| 23 subjectAltName = IP:127.0.0.1 | 23 subjectAltName = IP:127.0.0.1 |
| 24 basicConstraints = critical, CA:false | 24 basicConstraints = critical, CA:false |
| 25 subjectKeyIdentifier = hash | 25 subjectKeyIdentifier = hash |
| 26 extendedKeyUsage = codeSigning | 26 extendedKeyUsage = codeSigning |
| OLD | NEW |