{
  "signing": {
    "default": {
      "ocsp_url": "https://ocsp-responder.test",
      "expiry": "2190000h",
      "usages": [
        "signing",
        "key encipherment",
        "client auth"
      ]
    },
    "profiles": {
      "ocsp": {
        "usages": ["digital signature", "ocsp signing"],
        "expiry": "876000h"
      },
      "intermediate": {
        "usages": ["cert sign", "crl sign"],
        "expiry": "2190000h",
        "ca_constraint": {"is_ca": true}
      },
      "server": {
        "usages": ["signing", "key encipherment", "server auth"],
        "expiry": "876000h"
      },
      "client": {
        "usages": ["signing", "key encipherment", "client auth"],
        "expiry": "876000h"
      }
    }
  }
}
