3.1.2.4.2.2.1.3 Certificate.Template.pKIKeyUsage

The client MUST create the key usage extension with the bits value as specified in the Certificate.Template.pKIKeyUsage datum. Specifications on this extension are in [RFC3280] section 4.2.1.3.

This extension MUST be added as a request attribute to the certificate request, as specified in section 2.2.2.7.7.