ku=digitalSignature, keyEncipherment, keyAgreement
eku=clientAuth
days=732
+include=orga,orgaEmail+,orgName?
+requires=points>=100
ku=digitalSignature, keyEncipherment, keyAgreement
eku=emailProtection
days=732
+include=orga,orgaEmail+,orgName?
+requires=points>=100
ku=digitalSignature, keyEncipherment, keyAgreement
eku=clientAuth, emailProtection
days=732
+include=orga,orgaEmail+,orgName?
+requires=points>=100
ku=digitalSignature, keyEncipherment, keyAgreement
eku=serverAuth
days=732
+include=orga,orgaDomain+
+requires=points>=100
ku=digitalSignature, keyEncipherment, keyAgreement
eku=codeSigning, msCodeInd, msCodeCom
days=732
+include=orga,email+,orgaName
+requires=points>=100,codesign