Optional
KeyIndicates the purpose of the certificate and of the key contained in the certificate.
Optional
SubjectFor CA certificates, provides a path to additional information pertaining to the CA, such as revocation and policy. For more information, see Subject Information Access in RFC 5280.
Describes the certificate extensions to be added to the certificate signing request (CSR).