keygen: openssl.conf cleanup

keygen/openssl.conf

@@ -1,18 +1,13 @@
 [req]
 distinguished_name = req_distinguished_name
-x509_extensions = v3_ca	# The extentions to add to the self signed cert
+# The extensions to add to the self signed cert
+x509_extensions = v3_ca
 
 [req_distinguished_name]
 
 [v3_ca]
-
-# Extensions for a typical CA
-
-
-# PKIX recommendation.
-
+# Extensions for a typical CA - PKIX recommendation.
 subjectKeyIdentifier = hash
-
 authorityKeyIdentifier = keyid:always, issuer
 
 # This is what PKIX recommends but some broken software chokes on critical
@@ -34,7 +29,7 @@ basicConstraints = CA:true
 # Copy issuer details
 #issuerAltName = issuer:copy
 
-# DER hex encoding of an extension: beware experts only!
+# DER hex encoding of an extension: experts only!
 #obj = DER:02:03
 # Where 'obj' is a standard or added object
 # You can even override a supported extension: