1basicConstraints = CA:false 2subjectKeyIdentifier=hash 3authorityKeyIdentifier=keyid:always,issuer:always 4 5