CA
====

`Component CA Configuration File <https://pki-tutorial.readthedocs.io/en/latest/expert/component-ca.conf.html>`_

key usage
--------------

- Certificate Sign 

- CRL Sign

pathlen
-------------

- Root CA : pathlen = -1

- Intermediate CA: pathlen>0 (for example, pathlen = 1)