+++ /dev/null
-# This template file specifies that the certificate is a certificate
-# authority that will be used to sign other certificates, and
-# certificate revocations. Set additional properties (e.g. a CRL URI)
-# as appropriate.
-
-# Certificate authority template
-organization = "Example"
-cn = "Your CA name here"
-expiration_days = 3650
-
-# This CA can not issue subsidiary CAs
-path_len = 0
-
-# Is a CA
-ca
-
-# Signs certificates and certificate revocation lists
-cert_signing_key
-crl_signing_key
-
-# Name constraints (recommended); new in GnuTLS 3.3.x
-# Setting this will allow this CA to only issue
-# certificates for this domain
-nc_permit_dns = "example.com"
-#nc_exclude_dns = "test.example.com"