8 stateOrProvinceName
"Cambridgeshire"
9 localityName
"Cambridge"
10 organizationName
"distorted.org.uk"
11 commonName
"distorted.org.uk Certificate Authority"
12 emailAddress
"ca@distorted.org.uk"
16 extensions tls-client-extensions
17 issue-time
"*-*-* 03:00:00"
23 extensions tls-server-extensions
24 issue-time
"*-*-* 03:00:00"
30 exec 2>@stderr rsync
-av --delete-after ca.cert crl cert req publish
/
31 exec 2>@stderr userv root publish-ca