Vadims Podans

Thanks for confirming this!

It is unlikely will happen. Moreover, we are planning to remove all debug/verbose output which was added solely for debugging purposes, not a part of regular use.

>2.5.29.28 this OID stands for Issuing Distribution Points (IDP) extension which is used for partitioned CRLs. Although partitioned CRLs aren't supported in Microsoft Windows, ADCS supports adding IDP with default...

I've added native support for Issuing Distribution Point CRL extension.

I can confirm this issue and I have to address this issue to Microsoft since they don't have updated relevant documentation I use as trusted source.

do you receive your CAs when calling `Get-CertificationAuthority` and are they online and accessible?

Can you submit me example files for investigation? Current PKCS#7 decoder has some limitations (skips some parts from decoding), so it would be great if you wuld supply these files...

Library's source codes are on GitHib, specifically you need SignedPkcs7 class: https://github.com/Crypt32/pkix.net/blob/master/PKI/Cryptography/Pkcs/SignedPkcs7.cs

It seems that CSR is saved using binary encoding, not with PEM header and footer.

can you send me your CSR? You can send it through contact form: https://www.sysadmins.lv/contact.aspx