The key usage extension defines the purpose (e.g., encipherment, signature) of the key contained in the certificate.