basicConstraints=critical,CA:TRUE
keyUsage=critical,digitalSignature,cRLSign,keyCertSign
subjectKeyIdentifier=hash
crlDistributionPoints=URI:http://127.0.0.1:8099/root.crl