1*e0c4386eSCy SchubertbasicConstraints = critical, CA:true 2*e0c4386eSCy SchubertkeyUsage = cRLSign, keyCertSign 3*e0c4386eSCy SchubertsubjectKeyIdentifier = hash 4*e0c4386eSCy SchubertauthorityKeyIdentifier = keyid:always 5*e0c4386eSCy Schubert 6