verifier Require EKU
A dotted object identifier: recognizes only Verifier certificates under verifierRoots with that extended key usage, the one your ecosystem marks its Verifiers' certificates with. Outside development, required when verifierRoots shares a trust anchor with another role's roots.