add "Certificate Issuer" and "Subject Directory Attributes" OIDs