X509_get_extended_key_usage
&& (X509_get_extended_key_usage(x) & XKU_OCSP_SIGN))
uint32_t X509_get_extended_key_usage(X509 *x);