Support TLS client authentication Extended Key Usage in x509 generation