sl@0: extendedKeyUsage=codeSigning
sl@0: certificatePolicies=1.2.826.0.1.1796587.1
sl@0: basicConstraints=critical,CA:FALSE