v3_ca_exts.cnf 126 B

12345
  1. basicConstraints = CA:true
  2. keyUsage = cRLSign, keyCertSign
  3. subjectKeyIdentifier = hash
  4. authorityKeyIdentifier = keyid:always