pub const MBEDTLS_X509_KU_KEY_CERT_SIGN: u32 = 4;