xca
xca copied to clipboard
Templates and Key Identifiers
Templates do not enable subject key identifier and authority key identifier options. rfc states :
The keyIdentifier field of the authorityKeyIdentifier extension MUST be included in all certificates generated by conforming CAs to facilitate certification path construction.
Same goes for subject key identifier:
To facilitate certification path construction, this extension MUST appear in all conforming CA certificates, that is, all certificates including the basic constraints extension (Section 4.2.1.9) where the value of cA is TRUE.