1basicConstraints = critical,CA:false 2keyUsage=critical,digitalSignature 3subjectKeyIdentifier=hash 4 5