Tag: Certificate profile

When using Active Directory Certificate Services, it is noticeable that there are certain extensions in the certificates of the certification authorities and the certificates they issue that are not defined in the relevant RFCs and are specific to AD CS.

Continue reading "Removing ADCS-specific extensions from certificates"

When installing a subordinate certification authority, you may encounter the following behavior:

• One requests a Key Usage extension that is marked as critical, for example, or does not include DigitalSignature.
• However, the certificate issued by the parent certification authority includes DigitalSignature, and the Key Usage extension is marked as non-critical.
• The parent certification authority is a standalone certification authority, i.e. without Active Directory integration.

Continue reading "Description of the EDITF_ADDOLDKEYUSAGE flag"