cn = "opensuse" organization = "opensuse" serial = 1 expiration_days = 3650 ca signing_key cert_signing_key crl_signing_key