cfssl/bundler/testdata/client-auth/root-config.json

{
	"signing": {
		"default": {
			"ca_constraint": {
				"is_ca": true
            },
			"usages": ["cert sign"],
			"expiry": "43830h"
		}
	}
}