some certificates, that installed on system, have some politics for using (or how it names correctly). one for identify server, another for identify client, another for email, and etc (about 30 different politics) - they can be see in certmgr.msc in windows. and i can get this politics by CertGetEnhancedKeyUsage command. and it is cool...

but some certificates have all politics - in this case CertGetEnhancedKeyUsage is didnt work. so how to get this option of certificate "all politics of using"?