[ server_exts ] extendedKeyUsage = serverAuth [ client_exts ] extendedKeyUsage = clientAuth