cfssl/transport/example/config.json

{
    "signing": {
	"default": {
	    "expiry": "168h"
	},
	"profiles": {
            "client": {
		"expiry": "1h",
		"usages": [
		    "signing",
		    "key encipherment",
		    "client auth"
		]
	    },
            "server": {
		"expiry": "1h",
		"usages": [
		    "signing",
		    "key encipherment",
		    "server auth"
		]
	    }
	}
    }
}