+ SERVICE = imap
+ HOME = .
+ RANDFILE = var/sec/x509/openssl.rand
+[ req ]
+ distinguished_name = user_distinguished_name
+ prompt = no
+ string_mask = pkix
+[ user_distinguished_name ]
+ 0.organizationName = $ENV::x509_organization
+ commonName = $ENV::user@$ENV::x509_host
+ countryName = $ENV::x509_country
+ localityName = néant
+ organizationalUnitName = Certificat utilisateurice du service IMAP
+ stateOrProvinceName = $ENV::x509_state_or_province
+#[ user_extensions ]
+# subjectAltName = email:$ENV::user@$ENV::x509_host