basicConstraints = CA: FALSE subjectAltName = DNS: localhost, IP: 127.0.0.1 extendedKeyUsage = clientAuth