1*66bae5e7SchristosbasicConstraints = critical, CA:true 2*66bae5e7SchristoskeyUsage = cRLSign, keyCertSign 3*66bae5e7SchristossubjectKeyIdentifier = hash 4*66bae5e7SchristosauthorityKeyIdentifier = keyid:always 5*66bae5e7Schristos 6