ca=assured
ku=digitalSignature, keyEncipherment, keyAgreement
eku=serverAuth
days=732