A certificate extension of bit flags describing what cryptographic operations the key may perform: digital signature, key encipherment, certificate signing, CRL signing and others. CA certificates need the certificate-signing bit; TLS client certificates typically need digital signature. It works alongside EKU — key usage constrains the raw operations, EKU constrains the application purpose.