basicConstraints = critical,CA:FALSE
keyUsage = critical,digitalSignature,keyEncipherment
extendedKeyUsage = serverAuth,clientAuth
subjectKeyIdentifier = hash
authorityKeyIdentifier = keyid,issuer

subjectAltName = @alt_names

[alt_names]
DNS.1 = brilliant-opensearch-cluster-master-1
DNS.2 = brilliant-opensearch-cluster-master-1.brilliant-opensearch-cluster-master-headless
DNS.3 = brilliant-opensearch-cluster-master-1.brilliant-opensearch-cluster-master-headless.observability
DNS.4 = brilliant-opensearch-cluster-master-1.brilliant-opensearch-cluster-master-headless.observability.svc
DNS.5 = brilliant-opensearch-cluster-master-1.brilliant-opensearch-cluster-master-headless.observability.svc.cluster.local
DNS.6 = brilliant-opensearch-cluster-master
DNS.7 = brilliant-opensearch-cluster-master.observability
DNS.8 = brilliant-opensearch-cluster-master.observability.svc
DNS.9 = brilliant-opensearch-cluster-master.observability.svc.cluster.local