Can anyone please tell me how can I instruct an X509_STORE_CTX to verify keyUsage extension against a bit string? Or how can I obtain the bit string from the X509_EXTENSTION to verify the KU myself?

Thanks.