vendor/github.com/coreos/etcd/hack/scripts-dev/docker-dns/certs-common-name-multi/gencert.json

{
  "signing": {
    "default": {
        "usages": [
          "signing",
          "key encipherment",
          "server auth",
          "client auth"
        ],
        "expiry": "87600h"
    }
  }
}