lti-valued extension consisting of a list of names of the permitted key usages. The defined values are: <code>digitalSignature</code>, <code>nonRepudiation</code>, <code>keyEncipherment</code>, <code>dataEncipherment</code>, <code>keyAgreement</code>, <code>keyCertSign</code>, <code>cRLSign</code>, <code>encipherOnly</code>, and <code>decipherOnly</code>.</p>

<p>Examples:</p>

<pre><code> keyUsage = digitalSignature, nonRepudiation

 keyUsage = critical, keyCertSign</code></pre>

<h2 id="Extended-Key-Usage