# EACL for /C=US/O=Internet2/OU=InCommon/CN=InCommon Server CA
 access_id_CA   X509    '/C=US/O=Internet2/OU=InCommon/CN=InCommon Server CA'
 pos_rights     globus  CA:sign
 cond_subjects  globus  '/C=US/*'
