How to check that a certificate is suitable for Mac OS X kernel extensions signing

   The certificate suitable for signing kernel extensions must contain the following extension ( 1.2.840.113635.100.6.1.18 ) . You can check this by opening certificate information in Keychain Access application.