1[v3_ext] 2basicConstraints = CA:false 3subjectKeyIdentifier=hash 4authorityKeyIdentifier=keyid 5keyUsage=critical, digitalSignature, nonRepudiation, keyEncipherment 6