XKU_OCSP_SIGN
if ((x->ex_flags & EXFLAG_XKUSAGE) && (x->ex_xkusage & XKU_OCSP_SIGN))
x->ex_xkusage |= XKU_OCSP_SIGN;