diff --git a/rootreq.conf b/rootreq.conf
index 7c11dfd..dfb5ed8 100644
--- a/rootreq.conf
+++ b/rootreq.conf
@@ -5,8 +5,6 @@
 
 RANDFILE		= $ENV::HOME/ca/.rnd
 
-extensions		= v3_ext 
-
 [ req ]
 default_bits		= 2048
 distinguished_name	= req_distinguished_name
@@ -14,7 +12,7 @@ x509_extensions	        = v3_ca_ext
 
 # This sets a mask for permitted string types. There are several options. 
 # nombstr : PrintableString, T61String (no BMPStrings or UTF8Strings).
-string_mask = nombstr
+string_mask             = nombstr
 
 [ req_distinguished_name ]
 countryName			= Country Name (2 letter code)
@@ -46,12 +44,3 @@ emailAddress_default            = rootca@example.org
 basicConstraints       = critical, CA:true, pathlen:1
 keyUsage               = critical, keyCertSign,cRLSign
 nsComment              = "Example Labs Root Certificate"
-
-# PKIX recommendations harmless if included in all certificates.
-subjectKeyIdentifier=hash
-authorityKeyIdentifier = keyid:always,issuer:always
-
-# Include email address in subject alt name: another PKIX recommendation
-subjectAltName         = email:copy
-authorityInfoAccess    = OCSP;URI:http://ocsp.rootca.example.org/
-crlDistributionPoints  = URI:http://rootca.example.org/rootca.crl