cfssl/testdata/good_config.json

{
    "signing": {
        "default": {
            "expiry": "168h"
        },
        "profiles": {
            "www": {
                "usages": [
                    "signing",
                    "key encipherment",
                    "server auth"
                ],
                "name_whitelist": "^.*\\.cloudflare.com$"
            }
        }
    }
}