A basic configuration. SetHandler timestamp TimestampSigningCertificate /etc/pki/certs/timestamp.cert TimestampSigningKey /etc/pki/certs/timestamp.key TimestampDigest SHA1 TimestampDefaultPolicy 1.2.3.4 CASimpleSerialRandom on CASimpleTime on