CASD.CT/AUT certificate template

Example:

{
  "cert_type": "CERT.CASD.CT/AUT",
  "signature_algorithm": {
    "allowed_algorithms": [
      "sha256WithRSA",
      "sha384WithRSA",
      "sha512WithRSA"
    ],
    "default_algorithm": "sha256WithRSA"
  },
  "subject": {
    "attributes": [
      {
        "type": "subject_identifier",
        "encoding": "auto",
        "allowed_source": [
          "user_supplied",
          "fixed_value"
        ]
      }
    ]
  },
  "extensions": {
    "key_usage": {
      "required_usages": [
        {
          "oid": "digital_signature_verification"
        },
        {
          "oid": "encipherment_for_confidentiality"
        }
      ]
    },
    "discretionary_data": {
      "include": "yes",
      "format": "ber_tlv",
      "allowed_source": [
        "user_supplied",
        "fixed_value"
      ]
    }
  },
  "validity": {
    "min_duration": {
      "value": 10,
      "unit": "days"
    },
    "max_duration": {
      "value": 10,
      "unit": "years"
    }
  },
  "renewal_settings": {
    "renew_valid_cert": "anytime",
    "renew_expired_cert": "anytime",
    "renew_revoked_cert": true,
    "renewal_key_pair": "optional",
    "allow_override_renewal_key_pair": true
  }
}