Which are the extensions-id/flag/value for a X.509 certificate required by cups? Is there a different between cups-client and cups-server? thanks, sebastian