issuer:faulty-server-ca
subject:faulty-server-intermediate
extension:basicConstraints:cA,
extension:keyUsage:keyCertSign,cRLSign