title: Self-signed certificate with CA:TRUE and Key Usage not set to sign certificates - is it safe?
body: <p>We have such kind of certificate being used for developing purposes</p>
  
  <pre><code>        X509v3 extensions:
          X509v3 Basic Constraints: 
              CA:TRUE
          X509v3 Key Usage: 
              Digital Signature, Non Repudiation, Key Encipherment
          X509v3 Subject Alternative Name: 
              DNS:domain1.loc, DNS:domain2.loc
  </code></pre>
  
  <p>I see CA:TRUE here and because of that I am not sure whether it is safe to install this certificate in OSX keychain as trusted one or not (assuming that almost anybody has access to its private key). I do not see certificate signing in "Key Usage" section, but CA:TRUE makes me a little bit nervous. Is it safe to trust this certificate?</p>