drop the critical bit on some X509 extensions

autoca/ca.py

@@ -74,9 +74,9 @@ class CA(object):
             crypto.X509Extension('keyUsage', True,
                                  '%sdigitalSignature, keyEncipherment' % (
                     server and '' or 'nonRepudiation, ')),
-            crypto.X509Extension('extendedKeyUsage', True,
+            crypto.X509Extension('extendedKeyUsage', False,
                                  server and 'serverAuth' or 'clientAuth'),
-            crypto.X509Extension('nsCertType', True,
+            crypto.X509Extension('nsCertType', False,
                                  server and 'server' or 'client'),
             ]
         cert = certutil.sign_certificate(