Certificate extensions for v2 template schema
Application policies specify what the certificate is used for and its purpose.
The key usage extension defines the purpose (e.g., encipherment, signature, certificate signing) of the key contained in the certificate.