Rebex Secure Mail supports certificates with 2048-bit and 4096-bit RSA keys.
Rebex Secure Mail supports and uses the extended key usage (EKU) extension if present, although seldom-used anyExtendedKeyUsage OID is not supported at the moment (but we can easily add this if needed).