organization = "tshk.duckdns.org" cn = Example CA serial = 001 expiration_days = -1 ca signing_key cert_signing_key crl_signing_key