Вот сами сертификаты, распечатанные openssl
Это Root:
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:41:17:49:24:4e:cf:01:0a:eb:43:9b:df:2e:7e:e2:46:d5:d2:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: C = IL, ST = State Or Provice Name, L = Dune, O = SpaceCadets, OU = SpaceCadets, CN = SpaceCadets1, emailAddress = SpaceCadets@yandex.com
Validity
Not Before: Jun 18 16:26:54 2021 GMT
Not After : Nov 3 16:26:54 2048 GMT
Subject: C = IL, ST = State Or Provice Name, L = Dune, O = SpaceCadets, OU = SpaceCadets, CN = SpaceCadets1, emailAddress = SpaceCadets@yandex.com
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (4096 bit)
Modulus:
........
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE, pathlen:10
X509v3 Subject Key Identifier:
98:D4:C5:44:1F:5E:E0:BC:3B:1A:E8:0D:11:68:88:74:E4:3C:99:B3
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Authority Key Identifier:
keyid:98:D4:C5:44:1F:5E:E0:BC:3B:1A:E8:0D:11:68:88:74:E4:3C:99:B3
DirName:/C=IL/ST=State Or Provice Name/L=Dune/O=SpaceCadets/OU=SpaceCadets/CN=SpaceCadets1/
emailAddress=SpaceCadets@yandex.com serial:6A:41:17:49:24:4E:CF:01:0A:EB:43:9B:DF:2E:7E:E2:46:D5:D2:D4
Netscape Cert Type:
SSL CA, S/MIME CA, Object Signing CA
X509v3 Extended Key Usage:
OCSP Signing, TLS Web Server Authentication