[Freeipa-devel] [freeipa PR#1090][closed] Don't write p11-kit EKU extension object if no EKU