extendedKeyUsage=serverAuth,clientAuth
subjectAltName=DNS:localhost