Vadims Podans

Ok, can you send me certificates from first example, where you had 1 and 2 names (as in initial screenshots)? Also, can you paste code you used to create `$SAN`...

Sorry, I was extremely busy last week. I will get back to you soon.

I made a quick check and my initial suspect was correct. The idea is that when `$SAN.RawData.Length` is even number and length is less than 128 bytes, extension is added...

Although, this one is old, but I eventually found a way to work around `ICertAdmin::SetCertificateProperty` data marshalling issue. Thus, removing `wontfix` label and hoping to eventually fix this in native...

Hi, I'm not really understand the problem you are facing. The snippet from the top is working just fine. Last snippet indeed removes all ACEs from security descriptor and you...

Looks like I see the problem and can replicate.

A small update (not related to this issue, but same subject): https://github.com/PKISolutions/PSPKI/issues/130

Another related: https://github.com/PKISolutions/PSPKI/issues/131

Another related: https://github.com/PKISolutions/PSPKI/issues/132

Finally, got it working. Please, check if this DLL works for you: [SysadminsLV.PKI-v3.2.7.5.zip](https://github.com/PKISolutions/PSPKI/files/5496251/SysadminsLV.PKI-v3.2.7.5.zip)