1[int] 2subjectKeyIdentifier=hash 3authorityKeyIdentifier=keyid:always,issuer:always 4basicConstraints = CA:true 5