#!/usr/bin/env bash
# fake openssl x509 -- emit a subject/dates banner
echo "subject=CN = Vault Root Certificate Authority (charm-pki-local)"
echo "notBefore=Jun 27 00:00:00 2026 GMT"
echo "notAfter=Jun 24 00:00:00 2036 GMT"