ca=assured
ku=digitalSignature, keyEncipherment, keyAgreement
eku=emailProtection
days=732
include=email+,name?
requires=points>=50