ca=orgaSign
ku=digitalSignature, keyEncipherment, keyAgreement
eku=codeSigning, msCodeInd, msCodeCom
days=732
include=orga,email+,orgaName
requires=points>=100,codesign