Which two attributes are required on a certificate so it can be used as a CA certificate on SSL inspection? (Choose two.)

Which two attributes are required on a certificate so it can be used as a CA certificate on SSL inspection? (Choose two.)

A. The keyUsage extension must be set to keyCertSign. B. The CA extension must be set to TRUE. C. The issuer must be a public CA. D. The common name on the subject field must use a wildcard name.