1 2 3 4 5 6
issuer:evroot subject:no-ocsp-int-path-int issuerKey:ev extension:basicConstraints:cA, extension:keyUsage:cRLSign,keyCertSign extension:certificatePolicies:any