Identify Issuing CAs Which Have Had Their EKUs Limited During Deployment

[jakehildreth]

From @SanderBerkouwer

Before I forget, I want to run by you that I've seen CAs with custom capolicy.inf files that during setup prevents the CA from issuing certificates with certain EKUs. Perhaps, we might want to check on that as it would potentially invalidate certain findings.