authorityKeyIdentifier=keyid,issuer basicConstraints=CA:FALSE keyUsage = keyAgreement, keyEncipherment, digitalSignature subjectAltName = @alt_names [ alt_names ] DNS.1 = localhost