Skip to main content
Example person's user avatar
Example person's user avatar
Example person's user avatar
Example person
  • Member for 4 years, 9 months
  • Last seen more than a month ago
awarded
awarded
awarded
revised
Loading…
revised
Loading…
comment
Is there a standard order for the X.509 extensions of a certificate?
Steffen Ullrich said: I have no idea what you want to achieve in the first place. OID are just a series of octets with a registered associated meaning. There are no restrictions on who can use these OID. The meaning should make sense though in the context used and the one reading the certificate need to actually check the value and behave accordingly. So it all depends on what you express at the end and who will interpret the certificate policies - which is unknown.
comment
Is there a standard order for the X.509 extensions of a certificate?
I had asked. But that guy told me I am allowed. Let me link that
Loading…
comment
When I run this command in OpenSSL, it also creates a file called `serial_number.pem`
Is there any difference between 'The directory to output certificates to' and 'It specifies the directory where new certificates will be placed.' in this context? Because the new_certs_dir says new certificates, but outdir says just certificates. Does outdir place more certificates than new_certs_dir?Just tell me yes or no.
comment
When I run this command in OpenSSL, it also creates a file called `serial_number.pem`
Any difference between new_certs_dir and -outdir at all? Is it used in the command line too?
Loading…
comment
Should root certificates have OCSP or CRL for it?
Are you absolutely sure about that though? I want to make sure before I generate that root cert.
comment
Loading…