access_id_CA   X509    '/C=US/O=National Center for Supercomputing Applications/OU=Certificate Authorities/CN=Two Factor CA'
pos_rights     globus  CA:sign
cond_subjects  globus  '/C=US/O=National Center for Supercomputing Applications/CN=*'