[ca]
basicConstraints=critical,CA:true
subjectKeyIdentifier=hash
authorityKeyIdentifier=keyid:always,issuer:always
[cert]
basicConstraints=critical,CA:false
authorityKeyIdentifier=keyid,issuer