Which two attributes are required on a certificate so it can be used as a CA certificate on SSL Inspection? (Choose two.)

Which two attributes are required on a certificate so it can be used as a CA certificate on SSL Inspection? (Choose two.)

A. The CA extension must be set to TRUE. B. The issuer must be a public CA. C. The common name on the subject field must use a wildcard name. D. The keyUsage extension must be set to keyCertSign.