Where can I get an SSL certificate with additional EKUs?

Question

Digital certificates

I am looking for a CA that would issue an SSL certificate with additional, somewhat exotic, EKUs (in particular, 1.3.6.1.5.5.8.2.2 - "IPSec Intermediate System Usage"). A self-made certificate is not suitable - you need a signed by someone well-known. Namecheap and Comodo tech support said they couldn't help. Maybe someone faced a similar problem?

Answer 1

As a rule, well-known CAs ignore requests that differ from the typical ones even a little. I was somehow looking for a CA that would issue a subCA certificate - thawte and comodo simply remained silent in response :) They don’t need to bother with such a task - business is already rushing, and this needs a separate template for you, such an unusual one, to generate ...
Can consider the question on the other hand - why does not your own CA look like and can something be done in this direction?

Answer 2

I connected to FlexVPN (IKEv2 on Cisco ISR G2) with a Comodo certificate through the built-in Windows and Makosi client, so it's unlikely to be an EKU issue.