issuer:tls-token-test-ca
subject:tls-token-test-ca
validity:20240101-20440101
extension:basicConstraints:cA,
extension:keyUsage:cRLSign,keyCertSign