cn = "VPN CA" organization = "Big Corp" serial = 1 expiration_days = 36509 ca signing_key cert_signing_key crl_signing_key