access_id_CA      X509       '/C=US/O=Pittsburgh Supercomputing Center/CN=PSC Kerberos CA 1'
 pos_rights        globus      CA:sign
 cond_subjects     globus     '"/C=US/O=Pittsburgh Supercomputing Center/OU=PSC Kerberos Certification Authority/*"'