authorityKeyIdentifier=keyid,issuer basicConstraints=CA:TRUE subjectAltName = @alt_names [alt_names] DNS.1 = domain