Digital certificates often include extension fields that define their purpose, such as encryption, authentication, or signing. I’ve also read about certificates being used for non-repudiation purposes. What exactly differentiates certificates with general extension fields from those specifically used for non-repudiation? Is it just a matter of purpose, or are there structural or procedural differences as well?