ca=unassured
ku=digitalSignature, keyEncipherment, keyAgreement
eku=clientAuth, emailProtection
days=732
include=email+,name=WoTUser
name=ssl-client + mail (unassured)