{
	"ca": {
		"tls": {
			"caCertFile": "test/certs/ipki/minica.pem",
			"certFile": "test/certs/ipki/ca.boulder/cert.pem",
			"keyFile": "test/certs/ipki/ca.boulder/key.pem"
		},
		"hostnamePolicyFile": "test/hostname-policy.yaml",
		"grpcCA": {
			"maxConnectionAge": "30s",
			"services": {
				"ca.CertificateAuthority": {
					"clientNames": [
						"ra.boulder"
					]
				},
				"ca.OCSPGenerator": {
					"clientNames": [
						"ra.boulder"
					]
				},
				"ca.CRLGenerator": {
					"clientNames": [
						"crl-updater.boulder"
					]
				},
				"grpc.health.v1.Health": {
					"clientNames": [
						"health-checker.boulder"
					]
				}
			}
		},
		"saService": {
			"dnsAuthority": "consul.service.consul",
			"srvLookup": {
				"service": "sa",
				"domain": "service.consul"
			},
			"timeout": "15s",
			"noWaitForReady": true,
			"hostOverride": "sa.boulder"
		},
		"issuance": {
			"defaultCertificateProfileName": "legacy",
			"certProfiles": {
				"legacy": {
					"allowMustStaple": true,
					"maxValidityPeriod": "7776000s",
					"maxValidityBackdate": "1h5m",
					"lintConfig": "test/config-next/zlint.toml",
					"ignoredLints": [
						"w_subject_common_name_included",
						"w_ext_subject_key_identifier_not_recommended_subscriber"
					]
				},
				"modern": {
					"allowMustStaple": true,
					"omitCommonName": true,
					"omitKeyEncipherment": true,
					"omitClientAuth": true,
					"omitSKID": true,
					"maxValidityPeriod": "583200s",
					"maxValidityBackdate": "1h5m",
					"lintConfig": "test/config-next/zlint.toml",
					"ignoredLints": [
						"w_ext_subject_key_identifier_missing_sub_cert"
					]
				}
			},
			"crlProfile": {
				"validityInterval": "216h",
				"maxBackdate": "1h5m"
			},
			"issuers": [
				{
					"active": true,
					"issuerURL": "http://ca.example.org:4502/int-ecdsa-a",
					"ocspURL": "http://ca.example.org:4002/",
					"crlURLBase": "http://ca.example.org:4501/ecdsa-a/",
					"location": {
						"configFile": "test/certs/webpki/int-ecdsa-a.pkcs11.json",
						"certFile": "test/certs/webpki/int-ecdsa-a.cert.pem",
						"numSessions": 2
					}
				},
				{
					"active": true,
					"issuerURL": "http://ca.example.org:4502/int-ecdsa-b",
					"ocspURL": "http://ca.example.org:4002/",
					"crlURLBase": "http://ca.example.org:4501/ecdsa-b/",
					"location": {
						"configFile": "test/certs/webpki/int-ecdsa-b.pkcs11.json",
						"certFile": "test/certs/webpki/int-ecdsa-b.cert.pem",
						"numSessions": 2
					}
				},
				{
					"active": false,
					"issuerURL": "http://ca.example.org:4502/int-ecdsa-c",
					"ocspURL": "http://ca.example.org:4002/",
					"crlURLBase": "http://ca.example.org:4501/ecdsa-c/",
					"location": {
						"configFile": "test/certs/webpki/int-ecdsa-c.pkcs11.json",
						"certFile": "test/certs/webpki/int-ecdsa-c.cert.pem",
						"numSessions": 2
					}
				},
				{
					"active": true,
					"issuerURL": "http://ca.example.org:4502/int-rsa-a",
					"ocspURL": "http://ca.example.org:4002/",
					"crlURLBase": "http://ca.example.org:4501/rsa-a/",
					"location": {
						"configFile": "test/certs/webpki/int-rsa-a.pkcs11.json",
						"certFile": "test/certs/webpki/int-rsa-a.cert.pem",
						"numSessions": 2
					}
				},
				{
					"active": true,
					"issuerURL": "http://ca.example.org:4502/int-rsa-b",
					"ocspURL": "http://ca.example.org:4002/",
					"crlURLBase": "http://ca.example.org:4501/rsa-b/",
					"location": {
						"configFile": "test/certs/webpki/int-rsa-b.pkcs11.json",
						"certFile": "test/certs/webpki/int-rsa-b.cert.pem",
						"numSessions": 2
					}
				},
				{
					"active": false,
					"issuerURL": "http://ca.example.org:4502/int-rsa-c",
					"ocspURL": "http://ca.example.org:4002/",
					"crlURLBase": "http://ca.example.org:4501/rsa-c/",
					"location": {
						"configFile": "test/certs/webpki/int-rsa-c.pkcs11.json",
						"certFile": "test/certs/webpki/int-rsa-c.cert.pem",
						"numSessions": 2
					}
				}
			]
		},
		"serialPrefixHex": "7f",
		"maxNames": 100,
		"lifespanOCSP": "96h",
		"goodkey": {},
		"ocspLogMaxLength": 4000,
		"ocspLogPeriod": "500ms",
		"ctLogListFile": "test/ct-test-srv/log_list.json",
		"features": {}
	},
	"pa": {
		"challenges": {
			"http-01": true,
			"dns-01": true,
			"tls-alpn-01": true
		}
	},
	"syslog": {
		"stdoutlevel": 4,
		"sysloglevel": -1
	},
	"openTelemetry": {
		"endpoint": "bjaeger:4317",
		"sampleratio": 1
	}
}
