I read the documentation and not too clear on how I can implement a cert that won't fail when trying to authenticate windows XP & Windows 7 clients.

I can authenticate android devices using my certificate. I see there is an xpextensions file but not sure how to implement with the bootstrap script.