certificate field
Extended key usage (EKU)
What it means
What the certificate is FOR at the application level: TLS server, TLS client, code signing, email protection, time stamping.
Why it matters
A certificate without serverAuth can't secure a website no matter how valid it is otherwise. Windows is especially strict about EKUs for code signing and smart-card logon.
See this field on your own certificate
Drop or paste any certificate into the decoder — every field explained, nothing uploaded.
Open the certificate decoder →