issuer:ca-no-constraints
subject:int-bar-example-com-excluded
extension:basicConstraints:cA,
extension:keyUsage:cRLSign,keyCertSign
extension:nameConstraints:excluded:bar.example.com