How to add SPDM extension field to Caliptra's IDevID cert?

[yh36]

In SPDM DSP0274, the Hardware identity OID is used to identify the hardware identity certificate in a cert chain. Per the IDevID certificate format, Caliptra doesn't support this OID. How does Caliptra satisfy the SPDM requirement if customers want this DMTF SPDM extension field?

[ballle98]

see #1885

[jhand2]

For IDevID specifically, Caliptra only creates a CSR. The vendor CA is free to add this extension to the IDevID certificate.