UCR ssl extensions

Hi,

could someone explain how those two entries in UCR can be used?

ssl/usercert/UID/extensionsfile
ssl/windowscert/UID/extensionsfile

Am I right thinking this is to enable additional uses for the certificates, eg: serverAuth, clientAuth, codeSigning, emailProtection (ones that would normally reside in extendedKeyUsage = )?

If so, do we provide a link to a file with the extensions listed within or simply enter values directly in to the UCR?

Mastodon