#include <windows.h>
#include <certenroll.h>

int main() {
    HRESULT hr = CoInitialize(NULL);
    if (FAILED(hr)) {
        // 错误处理
        return 1;
    }

    // 创建证书属性扩展对象
    CComPtr<IX509AttributeExtensions> pExtensions;
    hr = pExtensions.CoCreateInstance(CLSID_CX509Extensions);
    if (FAILED(hr)) {
        // 错误处理
        CoUninitialize();
        return 1;
    }

    // 添加扩展属性，这里以添加一个 Key Usage 扩展为例
    CComPtr<IX509ExtensionKeyUsage> pKeyUsageExtension;
    hr = pKeyUsageExtension.CoCreateInstance(CLSID_CX509ExtensionKeyUsage);
    if (FAILED(hr)) {
        // 错误处理
        CoUninitialize();
        return 1;
    }

    // 设置 Key Usage 扩展的属性
    hr = pKeyUsageExtension->Initialize(X509KeyUsageKeyEncipherment | X509KeyUsageDigitalSignature);
    if (FAILED(hr)) {
        // 错误处理
        CoUninitialize();
        return 1;
    }

    // 将扩展属性添加到证书属性扩展对象中
    hr = pExtensions->InitializeEncode();
    if (FAILED(hr)) {
        // 错误处理
        CoUninitialize();
        return 1;
    }

    hr = pExtensions->AddExtension(pKeyUsageExtension);
    if (FAILED(hr)) {
        // 错误处理
        CoUninitialize();
        return 1;
    }

    hr = pExtensions->Encode();
    if (FAILED(hr)) {
        // 错误处理
        CoUninitialize();
        return 1;
    }

    // 释放资源
    pKeyUsageExtension.Release();
    pExtensions.Release();

    CoUninitialize();
    return 0;
}