access_id_CA   X509    '/C=US/O=ISRG/CN=Root YR'
pos_rights     globus  CA:sign
cond_subjects  globus  '"/C=US/O=Let\'s Encrypt/CN=YR1" "/C=US/O=Let\'s Encrypt/CN=YR2" "/C=US/O=Let\'s Encrypt/CN=YR3"'
