[openssl-users] 802.1AR certificate generation and the config file

[Salz, Rich]

> Given these supported names, what goes into the config file to create a SAN
> without having to specify it on the command line?

In the certificate extensions section you do something like:
	subjectAltName = dns:www.example.com, IP:127.0.0.1
and so on.  The "pki.tgz"

> And further it seems you are saying there is no support for HMN at all.

Right.