Extension to extract an identity from a certificate