Certificate extensions for v4 template schema
Application policies specify what the certificate is used for and its purpose.
The key usage extension defines the purpose (e.g., encipherment, signature) of the key contained in the certificate.