issuer:collection-signer-ca
subject:collection-signer-ca
extension:basicConstraints:cA,
extension:extKeyUsage:codeSigning