1 2 3 4
issuer:collection-signer-ca subject:collection-signer-ca extension:basicConstraints:cA, extension:extKeyUsage:codeSigning