[SAI_Peregrinus]

Or the man page for OpenSSL's config, which actually has many of the options in the man pages for `req`, `x509`, and `ca`.