ca=unassured
ku=digitalSignature
eku=OCSPSigning
days=732
include=orga,domain,noOCSP
requires=points>=100,ocsp
name=ocsp (unassured)