Signature verification fails when timestamp is present and x509.VerifyOptions has key usage about ietf-cms HOT 2 CLOSED

                      tsOpts := x509.VerifyOptions{
				Roots:         opts.Roots,
				Intermediates: opts.Intermediates,
				KeyUsages: []x509.ExtKeyUsage{
					x509.ExtKeyUsageTimeStamping,
				},
			}

			tsti, err := getTimestamp(si, tsOpts)
			if err != nil {
				return nil, errors.Annotatef(err, "failed to verify timestamp")
			}