New answers tagged x.509
2
votes
Name Constraints, empty sets in permitted subtree (RFC 3280 vs RFC 5280)
I did some digging, and The CA/Brower Forum, of which Microsoft is a member, suggests another way of doing it, that doesn't sound very logical. The Baseline Requirements have the following blurb in §...
- 4,708
0
votes
What happens when you ignore HTTPS warning?
It actually depends on the exact problem that is reported by the browser. You did not specify how exactly your self-signed certificate looks, so I see two possibilities (or a combination of both):
a) ...
- 691
1
vote
What happens when you ignore HTTPS warning?
The browser associates the domain in the URL (or IP if no domain name given) with the specific certificate observed. This means same certificate, different domain -> no trust. Same domain, ...
- 183k
3
votes
What is the best practice for relying parties to selectively trust certificates in a corporate pki hierarchy?
Your option 2 is correct.
You need to use the Certificate Policies extension as you suggested.
X509 defines a Certificate Policy as:
A named set of rules that indicates the applicability of a ...
- 1,367
Top 50 recent answers are included