# TSU-GE Root CA signing policy access_id_CA X509 '/DC=GE/DC=TSU/CN=TSU Root CA' pos_rights globus CA:sign cond_subjects globus '"/DC=GE/DC=TSU/CN=TSU Root CA" "/DC=GE/DC=TSU/*"'