subjectKeyIdentifier   = hash
authorityKeyIdentifier = keyid:always,issuer:always
#basicConstraints       = CA:TRUE
keyUsage               = digitalSignature, nonRepudiation, keyEncipherment, dataEncipherment, keyAgreement, keyCertSign
subjectAltName         = DNS:localhost
issuerAltName          = issuer:copy
