title: X.509 extensions for verifying JWT
body: <p>I'd like to create a X.509 public key certificate to verify signatures, esp. JWT Tokens.</p>
  
  <p>I'd like to know which properties and extensions properties to set to which values on the certificate to restrict it for JWT verification.</p>
  
  <p>Unfortunately, the specification of X.509 extensions is pretty verbose. So, I'd also be very thankful for a brief overview of available X.509 extensions, properties and their meaning.</p>