1 2 3 4
issuer:ca subject:int-no-ku-server-eku extension:basicConstraints:cA, extension:extKeyUsage:serverAuth,clientAuth