This will allow us to use the CA:FALSE extension, enabling us to safely store the generated certificates into the trust store automatically.