pub fn kp_client_auth() -> ObjectIdentifier