3 ms·
And another small note in regards to CSR: typical CA today uses the CSR only to get public key you want to have signed and replaces everything else with whateve
by dfox 11y ago
And another small note in regards to CSR: typical CA today uses the CSR only to get public key you want to have signed and replaces everything else with whatever they deem correct.
- scintill76 11y agoDid a CA once accidentally sign a raw CSR that requested to itself become a CA? It seems like I remember something like this, but I couldn't find evidence. Anyway, that's one reason for the CA to be very careful what values it pulls out of the CSR.