The current certificate template purpose requires at least one signature key usage option to be present in the key usage ...