The Options that you include things like from the CAPolicy.inf file depend mostly over the deployment style you want to generate. For instance, a root CA may have a CAPolicy.inf file that appears like this: For that reason, it is vital that you do not use the fully qualified area https://luxepointbrowsandbeauty.com/services.html