========================  ==========  =============================================================
CA                        Critical    Usages
========================  ==========  =============================================================
Comodo
Comodo DV                 ✗           serverAuth, clientAuth
Comodo EV
DST X3
DigiCert EV Root
DigiCert Global Root
DigiCert HA Intermediate  ✗           serverAuth, clientAuth
DigiCert Secure Server
GeoTrust
GlobalSign
GlobalSign DV
GlobalSign R2
Go Daddy G2
Go Daddy G2 Intermediate
Google G3                 ✗           serverAuth, clientAuth
IdenTrust
Let's Encrypt X1
Let's Encrypt X3
RapidSSL G3
StartSSL
StartSSL class 2          ✗           clientAuth, serverAuth
StartSSL class 2
TrustID Server A52        ✗           serverAuth, clientAuth, Unknown OID, Unknown OID, Unknown OID
========================  ==========  =============================================================