issuer:ca
subject:ca
validity:20100101-20500101
extension:keyUsage:keyCertSign,cRLSign
extension:basicConstraints:cA,