Fixed my issue by adding ExtKeyUsage to root CA.
I'm not sure EKU I used is actually correct ones, but it works fine.
https://github.com/GorvGoyl/Clone-Wars/pull/210#issuecomment-1431119310