Certificate Profiles for PKI Interoperability

What are optimum certificate profile parameters to achieve better PKI Interoperability and greater DSC usage?

1. Single certificate for multiple applications
2. Right balnace between critical and not critical extensions, interoperability and recognition