certificatePolicies = @service_certificate_policies
[ service_self_signed_extensions ]
basicConstraints = critical,CA:TRUE,pathlen:0
certificatePolicies = @service_certificate_policies
[ service_self_signed_extensions ]
basicConstraints = critical,CA:TRUE,pathlen:0