When I create a CSR and provide the block of encrypted text to a Root CA (e.g. Verisign, Thawte), what or who will determine the Key Usage extension attributes like:
- Digital Signature
- Non-Repudiation
- Key Encipherment
Are these already included in the CSR or is the Root CA setting them respectively?