[Version]
Signature="$Windows NT$

[Strings]
szOID_BASIC_CONSTRAINTS2 = "2.5.29.19"

[NewRequest]
Subject = "CN=TestEKUParsingRoot"
Exportable = true
KeyLength = 521
HashAlgorithm = sha256
KeyUsage = "CERT_DIGITAL_SIGNATURE_KEY_USAGE | CERT_KEY_CERT_SIGN_KEY_USAGE | CERT_CRL_SIGN_KEY_USAGE"
KeyUsageProperty = "NCRYPT_ALLOW_SIGNING_FLAG"
MachineKeySet = True
RequestType = cert
ValidityPeriodUnits = 30
ValidityPeriod = Years
ProviderName = "Microsoft Software Key Storage Provider"
KeyAlgorithm = ECDSA_P521




[Extensions]
%szOID_BASIC_CONSTRAINTS2% = "{text}"
    _continue_ = "ca=True"

Critical=%szOID_BASIC_CONSTRAINTS2%