CSC Data Model Bindings 1.0.0 section 8.1: OPTIONAL Certificate policy OIDs required of the credential.