diff --git a/pki/ca_config.json b/pki/ca_config.json
new file mode 100644
index 0000000..113a08f
--- /dev/null
+++ b/pki/ca_config.json
@@ -0,0 +1,13 @@
+{
+  "signing": {
+    "default": {
+      "expiry": "8760h"
+    },
+    "profiles": {
+      "test": {
+        "usages": ["signing", "key encipherment", "server auth", "client auth"],
+        "expiry": "8760h"
+      }
+    }
+  }
+}