issuer:Test CA
subject:nsCertType Not Critical
extension:subjectAlternativeName:localhost,*.example.com
extension:nsCertType:sslServer