PKINIT_EKU_CLIENTAUTH
eku_bits |= PKINIT_EKU_CLIENTAUTH;
{ "clientAuth", 10, PKINIT_EKU_CLIENTAUTH },