ca=orgaSign
ku=digitalSignature, keyEncipherment, keyAgreement
eku=codeSigning, msCodeInd, msCodeCom
days=732