Assertion: smart card's certificate | /r/HasAspect | user principal name
Facets:
value: in the enhanced key usage
type: MANNER
Source sentences:
text: Each certificate must have a user principal name (UPN) and the smart card sign-in object identifier (also known as OID) in the enhanced key usage (EKU) attribute field.