basicConstraints=CA:FALSE
keyUsage=digitalSignature
extendedKeyUsage=clientAuth