Configure root CA to only allow signing specific TLDs, defaulting to the `.test` TLD. @kevinjil
Configure root CA to only allow signing specific TLDs, defaulting to the
.testTLD.@Kevinjil