[Version]
Signature="$Windows NT$
;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
; 2.5.29.19 == Basic Constraints for CA
[Strings]
szOID_BASIC_CONSTRAINTS2 = "2.5.29.19"

[NewRequest]
Subject = "CN=TestEKUParsingPolicyCA"
Exportable = true
KeyLength = 384
HashAlgorithm = sha256
KeyUsage = "CERT_KEY_CERT_SIGN_KEY_USAGE"
KeyUsageProperty = "NCRYPT_ALLOW_SIGNING_FLAG"
MachineKeySet = True
RequestType = cert
ValidityPeriodUnits = 20
ValidityPeriod = Years
ProviderName = "Microsoft Software Key Storage Provider"
KeyAlgorithm = "ECDSA_P384"


[Extensions]
%szOID_BASIC_CONSTRAINTS2% = "{text}"
    _continue_ = "ca=True"

Critical=%szOID_BASIC_CONSTRAINTS2%