The key usage extension defines the purpose (e.g., encipherment, signature, certificate signing) of the key contained in the certificate.