": "%PUBKEY%",
  "ext": [
    {"extname":"basicConstraints", "cA": false, "critical": true},
    {"extname":"keyUsage", "names":["digitalSignature","nonRepudiation"]},
    {"extname":"cRLDistributionPoints",
     "array":[{"fulluri": "http://rep.example.com/aaa.crl"}]},
    {"extname":"extKeyUsage", "array":["clientAuth"]},
    {"extname":"subjectAltName", "array":[
      {"uri": "http://example.com/"},
      {"rfc822": "user1@example.com"},
      {"dn": "/C=US/O=example/CN=user1"},
      {"ip": 