80 says that <b>id-kp-serverAuth</b> and <b>id-kp-clientAuth</b> are only for WWW use, in practice they are used for all kinds of TLS clients and servers, and this is what OpenSSL assumes as well.</p>

<p>Examples:</p>

<pre><code> extendedKeyUsage = critical, codeSigning, 1.2.3.4

 extendedKeyUsage = serverAuth, clientAuth</code></pre>

<h2 id="Subject-Key-Identifier">Subject Key Identifier</h2>

<p>The SKID extension specification has a value with three choices.</p>

<dl>

<dt id="none"><b>none</b></dt>
<