access_id_CA   X509    '/C=US/O=ISRG/CN=Root YE'
pos_rights     globus  CA:sign
cond_subjects  globus  '"/C=US/O=Let\'s Encrypt/CN=YE1" "/C=US/O=Let\'s Encrypt/CN=YE2" "/C=US/O=Let\'s Encrypt/CN=YE3"'
