issuer:ca-example-com-permitted
subject:ca-example-com-permitted
extension:basicConstraints:cA,
extension:keyUsage:cRLSign,keyCertSign
extension:nameConstraints:permitted:example.com