4 x509_extensions = custom_extensions
6 distinguished_name = distinguished_name
9 subjectKeyIdentifier = hash
10 authorityKeyIdentifier = keyid:always,issuer:always
11 basicConstraints = critical, CA:true
14 CN = DNSDist TLS regression tests CA
19 basicConstraints = CA:true
20 keyUsage = cRLSign, keyCertSign
23 copy_extensions = copy