| # In how many days, counting from today, this certificate will expire. |
| # Use -1 if there is no expiration date. |
| expiration_days = -1 |
| |
| # An IP address in case of a server. |
| ip_address = "127.0.0.1" |
| |
| #### Key usage |
| |
| # The following key usage flags are used by CAs and end certificates |
| |
| # Whether this certificate will be used to sign data (needed |
| # in TLS DHE ciphersuites). This is the digitalSignature flag |
| # in RFC5280 terminology. |
| signing_key |
| |
| # Whether this certificate will be used to encrypt data (needed |
| # in TLS RSA ciphersuites). Note that it is preferred to use different |
| # keys for encryption and signing. This is the keyEncipherment flag |
| # in RFC5280 terminology. |
| encryption_key |