RFC 5280 (and its predecessors) defines a number of certificate extensions which indicate how the certificate should be used.
RFC 5280（及后续版本）定义了一些扩展用来指定证书的用途。