Certificate Profiles determine the specific behavior of a certificate type, mainly through particular extensions. There are default certificate profiles available. This document assumes that you use the built-in ID_CLIENT_SERVER profile.