I need to constrain the valid names for a child CA, and want this attribute visible in the certificate. I have placed the required entry in Policy.inf, and Capolicy.inf in both the Root and the Child CA, but I'm unable to get the .REQ file nor the issued certificate to have the required constraint.
I have pasted in a full output of my INF files in the following Serverfault.com link
http://serverfault.com/q/576651/51457