1 2 3 4 5
issuer:ca subject:expired-ca extension:basicConstraints:cA, extension:keyUsage:cRLSign,keyCertSign validity:20100101-20110101