Source: https://pki.almerys.com/intermediate/be-yssignatureandauthenticationcanc2/certificatePolicy/PKA017-2-PC be-ys Signature and Authentication CA NC-2 v2.5.pdf