4 ms·
X509 extensions can be marked as critical. Certificates must be rejected if the stack encounters a critical extension it doesn't understand. (In theory at least
by grahamedgecombe 11y ago
X509 extensions can be marked as critical. Certificates must be rejected if the stack encounters a critical extension it doesn't understand. (In theory at least, I haven't looked at real implementation behaviour.)
- dtech 11y agoSo then you've jumped from the frying pan into the fire, since your cert now will not work in those implementations.