[Version] Signature="$Windows NT$ [EnhancedKeyUsageExtension] OID = 1.3.6.1.4.1.311.76.9.21.1 [NewRequest] Subject = "CN=TestEKUParsingLeafSigner" Exportable = true KeyLength = 256 HashAlgorithm = sha256 KeyUsage = "CERT_DIGITAL_SIGNATURE_KEY_USAGE" KeyUsageProperty = "NCRYPT_ALLOW_SIGNING_FLAG" MachineKeySet = True RequestType = cert ValidityPeriodUnits = 20 ValidityPeriod = Years ProviderName = "Microsoft Software Key Storage Provider" KeyAlgorithm = "ECDSA_P256" ; ; Surface test firwmare signing EKU ; [Extensions] _continue_ = "1.3.6.1.4.1.311.76.9.21.1"