- ("extnID", id_ce_subjectAltName),
- ("extnValue", OctetString(
- SubjectAltName((
- GeneralName(("dNSName", IA5String(args.cn))),
- )).encode()
- )),
+ ("extnID", id_ce_keyUsage),
+ ("critical", Boolean(True)),
+ ("extnValue", OctetString(KeyUsage(
+ ("keyCertSign" if args.ca else "digitalSignature",),
+ ).encode())),