Changes by Kind Bug or Regression Do not encode ExtendedKeyUsage in the CSR is none is needed (#3295, @meyskens) Fixes incorrect CSR validation when both "signing" and "digital signature" are set (#3306, @meyskens)