config.json

{
    "signing": {
        "default": {
            "expiry": "43800h"
        },
        "profiles": {
          "intermediate": {
              "expiry": "43800h",
              "usages": [
                  "signing",
                  "key encipherment",
                  "cert sign",
                  "crl sign"
              ],
              "ca_constraint": {
                  "is_ca": true,
                  "max_path_len":1
              }
          },
          "server": {
                "expiry": "43800h",
                "usages": [
                    "signing",
                    "key encipherment",
                    "server auth",
                    "cert sign",
                    "crl sign",
					"content commitment"
                ]
            },
            "client": {
                "expiry": "43800h",
                "usages": [
                    "signing",
                    "key encipherment",
                    "client auth",
                    "email protection"
                ]
            }
        }
    }
}