basicConstraints=critical,CA:TRUE
keyUsage=digitalSignature,keyCertSign