Timeline for What is the purpose of "certificatePolicies" in a CSR? How should an OID be used?
Current License: CC BY-SA 4.0
6 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Mar 28 at 15:11 | vote | accept | Chris Bornhoft | ||
| S Jul 28, 2021 at 18:11 | history | suggested | Chris Bornhoft | CC BY-SA 4.0 |
added to answer from comments
|
| Jul 28, 2021 at 18:09 | review | Suggested edits | |||
| S Jul 28, 2021 at 18:11 | |||||
| Jul 23, 2021 at 18:04 | comment | added | Steffen Ullrich | @ChrisBornhoft: A single OID refers to a single certificate policy, like "this domain was domain-validated". Many certificates can have the same certificate policy. The OID should be registered (as is true with OID outside certificate policy too). See Wikipedia for more. As far as I know there is no requirement to have a certificatePolicy in a certificate. | |
| Jul 23, 2021 at 16:54 | comment | added | Chris Bornhoft | That's a start, thank you. What about the second part of the question, relating to best practices, uniqueness etc? Do you have any insight? | |
| Jul 23, 2021 at 15:52 | history | answered | Steffen Ullrich | CC BY-SA 4.0 |