title: Client Authentication (1.3.6.1.5.5.7.3.2) OID in server certificates
body: <p>For a project I'm working on I have to generate web server certificate.
  As I understand it, server certificates should contain the Server Authentication OID (1.3.6.1.5.5.7.3.1). But as I see all server certificates issued by well known issuers like Verisign contain also Client Authentication OID (1.3.6.1.5.5.7.3.2).  </p>
  
  <p>I tried to use certificate with only server authentication OID - seems it works fine. </p>
  
  <h3>Questions</h3>
  
  <ul>
  <li>Why is the client authentication OID needed for server certificates? </li>
  <li>Is it needed for some legacy support or there is another reason for it?</li>
  </ul>