cn = Knot Resolver testing CA
ca
cert_signing_key
expiration_days = -1