Если его обнаружат, то впаяют препятствие следствию.
openssl ca -config /etc/ssl/openssl.cnf -policy $policy \
-extensions $extension -days $days \
-out ssl.crt/$filename.pem -in ssl.csr/$filename.pem
[ new_oids ]
hardwareSubcategory=1.3.6.1.4.1.NNN.3.2
[ policy_supplied ]
...
hardwareSubcategory = optional
[ req_distinguished_name ]
hardwareSubcategory = Category of device (server, printer, network device, etc.)
hardwareSubcategory_max = 64