CERT_ENHKEY_USAGE keyUsage;
		DWORD cbkeyUsage;
		LPBYTE pbkeyUsage;
		CERT_EXTENSION CertExtension = { 0 };
		CERT_EXTENSIONS CertExtentions = { 0 };

		keyUsage.cUsageIdentifier = 2;
		keyUsage.rgpszUsageIdentifier = (LPSTR*)malloc(sizeof(LPSTR)*keyUsage.cUsageIdentifier);
		keyUsage.rgpszUsageIdentifier[0] = "1.3.6.1.5.5.7.3.4";
		keyUsage.rgpszUsageIdentifier[1] = "1.3.6.1.5.5.7.3.2";

		if (CryptEncodeObject(
			MY_ENCODING_TYPE,
			X509_ENHANCED_KEY_USAGE,
			(LPVOID)&keyUsage,
			NULL,
			&cbNameEncoded))
		{
			printf("ture \n");
		}
		else {
			printf("false \n");
			return false;
		}

		pbkeyUsage = (LPBYTE)HeapAlloc(GetProcessHeap(), 0, cbNameEncoded);

		if (CryptEncodeObject(
			MY_ENCODING_TYPE,
			X509_ENHANCED_KEY_USAGE,
			(LPVOID)&keyUsage,
			pbkeyUsage,
			&cbNameEncoded))
		{
			printf("true \n");
		}
		else {
			printf("false \n");
			return false;
		}

		LPBYTE SubjectKeyIdentifier = NULL;
		SubjectKeyIdentifier = (LPBYTE)HeapAlloc(GetProcessHeap(), 0, cbNameEncoded);

		CryptGetHashParam(hCryptProv, HP_HASHVAL, SubjectKeyIdentifier, &cbNameEncoded, 0);

		CertExtension.pszObjId = szOID_ENHANCED_KEY_USAGE;
		CertExtension.fCritical = FALSE;
		CertExtension.Value.cbData = cbNameEncoded;
		CertExtension.Value.pbData = SubjectKeyIdentifier;

		CertExtentions.cExtension = 1;
		CertExtentions.rgExtension = &CertExtension;

		CRYPT_ATTR_BLOB CertAttrBlob[1] = { 0 };

		CryptEncodeObject(MY_ENCODING_TYPE, szOID_CERT_EXTENSIONS, &CertExtentions, NULL, &CertAttrBlob[0].cbData);
		CertAttrBlob[0].pbData = (LPBYTE)malloc(CertAttrBlob[0].cbData);
		CryptEncodeObject(MY_ENCODING_TYPE, szOID_CERT_EXTENSIONS, &CertExtentions, CertAttrBlob[0].pbData, &CertAttrBlob[0].cbData);

		CRYPT_ATTRIBUTE rgAttrib = { 0 };
		rgAttrib.pszObjId = szOID_CERT_EXTENSIONS;
		rgAttrib.cValue = 1; //2
		rgAttrib.rgValue = CertAttrBlob;
		CertReqInfo.cAttribute = 1;
		CertReqInfo.rgAttribute = &rgAttrib;