ca=unassured
ku=digitalSignature, keyEncipherment, keyAgreement
eku=serverAuth
days=732
include=domain+
name=ssl-server (unassured)