1----- Certificate i=1 (CN=keyUsage Critical keyCertSign False CA,O=Test Certificates 2011,C=US) ----- 2ERROR: keyCertSign bit is not set 3 4