title: Should X509 certificate have nonRepudiation bit set to check PKCS7 signature?
body: <p>X509 certificate has set of keyUsage bits. Two of them are
  digitalSignature<br />
  nonRepudiation (recent editions of X.509 have renamed this bit to contentCommitment).</p>
  <p>I read X509 RFC (<a href="https://www.rfc-editor.org/rfc/rfc5280" rel="nofollow noreferrer">https://www.rfc-editor.org/rfc/rfc5280</a>) and it talks about general usage of these bit.</p>
  <p>And I read PKCS7 RFC (<a href="https://www.rfc-editor.org/rfc/rfc2315" rel="nofollow noreferrer">https://www.rfc-editor.org/rfc/rfc2315</a>) and it talks about PKCS7 structure and so on and doesn't specify which bits needs to be set.</p>
  <p>Is there any RFC or other specification which identifies whether one or both of them should be set?</p>
  <p>Regards,
  Victor</p>