---
test_ca_ec:
  ca_cert:
    cert: test_ca_ec.cer
    key: test_ca_ec.key
  crl_validity_hours: 72
  ocsp_validity_hours: 96
  ocsp_start_skew_seconds: 1800
  profiles:
    server:
      basic_constraints:
        :ca: false
      key_usage:
        :value:
        - digitalSignature
        - keyEncipherment
      extended_key_usage:
        :value:
        - serverAuth
    client:
      basic_constraints:
        :ca: false
      key_usage:
        :value:
        - digitalSignature
        - keyEncipherment
      extended_key_usage:
        :value:
        - clientAuth