# CSR template example for PKIClientCli
[DN]
# Distinguished Name section
#(ИНН)
1.2.643.3.131.1.1=001234567890
#(СНИЛС)
1.2.643.100.3=12345678901
#(Country)
2.5.4.6=RU
#(State)
2.5.4.8=
#(City)
2.5.4.7=77 Moscow
#(Street)
2.5.4.9=Адрес компании
#(Organization)
2.5.4.10=ООО Рога и копыта
#(OU)
2.5.4.11=
#(Unstructured Name)
1.2.840.113549.1.9.2=
#(Title)
2.5.4.12=Директор
#(email)
1.2.840.113549.1.9.1=ivanov@mail.ru
#(Given Name)
2.5.4.42=Иван Иванович
#(Surname)
2.5.4.4=Иванов
#(Common Name)
2.5.4.3=ООО Рога и копыта
[ATTRIBUTES]
# CSR attributes section
#(challengePassword)
1.2.840.113549.1.9.7=123
# GOST R 34.10-2012, 256 bit
1.2.643.7.1.1.2.2=TRUE
[EXTENSIONS]
# CSR extensiotns section
keyUsage=digitalSignature,keyEncipherment,nonRepudiation,dataEncipherment=TRUE
# Extended Key Usage
extKeyUsage=smartCardLogon,ipSecIke=FALSE
# Microsoft UPN
1.3.6.1.4.1.311.20.2.3=user@local=FALSE