issuer:ca
subject:int-bad-ku-server-eku
extension:basicConstraints:cA,
extension:keyUsage:digitalSignature,nonRepudiation,keyEncipherment,dataEncipherment,keyAgreement,cRLSign
extension:extKeyUsage:serverAuth,clientAuth