+exts = [
+ Extension((
+ ("extnID", id_ce_subjectKeyIdentifier),
+ ("extnValue", OctetString(
+ SubjectKeyIdentifier(GOST34112012512(pub_raw).digest()[:20]).encode()
+ )),
+ )),
+]
+if args.ca:
+ exts.append(Extension((
+ ("extnID", id_ce_basicConstraints),
+ ("extnValue", OctetString(BasicConstraints((("cA", Boolean(True)),)).encode())),
+ )))