[v3_ext] basicConstraints = CA:false subjectKeyIdentifier=hash authorityKeyIdentifier=keyid nsCertType=server