# TSU-GE Root CA signing policy
 access_id_CA      X509     '/DC=GE/DC=TSU/CN=TSU Root CA'
 pos_rights        globus   CA:sign
 cond_subjects     globus   '"/DC=GE/DC=TSU/CN=TSU Root CA" "/DC=GE/DC=TSU/*"'
