authorityKeyIdentifier=keyid,issuer
basicConstraints=CA:FALSE
keyUsage = digitalSignature, nonRepudiation, dataEncipherment
subjectAltName = @alt_names
[ alt_names ]
DNS.1 = localhost