xca icon indicating copy to clipboard operation
xca copied to clipboard

Templates and Key Identifiers

Open Olegandr opened this issue 4 years ago • 0 comments

Templates do not enable subject key identifier and authority key identifier options. rfc states :

   The keyIdentifier field of the authorityKeyIdentifier extension MUST    be included in all certificates generated by conforming CAs to    facilitate certification path construction.

Same goes for subject key identifier:

To facilitate certification path construction, this extension MUST    appear in all conforming CA certificates, that is, all certificates including the basic constraints extension (Section 4.2.1.9) where the value of cA is TRUE.

Olegandr avatar Jun 09 '20 08:06 Olegandr