v3_ca_exts.cnf 136 B

12345
  1. basicConstraints = critical, CA:true
  2. keyUsage = cRLSign, keyCertSign
  3. subjectKeyIdentifier = hash
  4. authorityKeyIdentifier = keyid:always