Deprecation of public client EKU and cloudflare

Does cloudflare AOP check for client EKU on a custom certificate? up thus far we've been uploading letsencrypt certificates and things worked, but there's a pending change. Non-browser entities have traditionally not respected the client EKU requirement, but does cloudflare?
Was this page helpful?