openssl x509 -in ca-nonca.pem -trustout -addtrust serverAuth -out nca+serverAuth.pem
openssl x509 -in ca-nonca.pem -trustout -addtrust anyExtendedKeyUsage -out nca+anyEKU.pem
openssl x509 -in ca-nonca.pem -trustout -addtrust serverAuth -out nca+serverAuth.pem
openssl x509 -in ca-nonca.pem -trustout -addtrust anyExtendedKeyUsage -out nca+anyEKU.pem