Skip to content

Uwe Gradenegger

  • Home
  • About me
  • Imprint
  • Privacy policy
  • Deutsch
  • English

Tag: RFC 5246

Basics: The Key Usage Certificate Extension

Certificate extensions were introduced with version 3 of the X.509 standard. The Key Usage extension is an optional certificate extension that is defined in RFC 5280 and is used to limit the permitted uses of a key.

Continue reading "Basics: The Key Usage Certificate Extension"

Posted on 17.08.2021 Categories Certificate usage, Basics Tags RFC 5280, Key usage, RFC 5246, RFC 4492

Configuring a Secure Socket Layer (SSL) Certificate Template for Web Server

Below is a guide to configuring a web server template with recommended settings.

Continue reading "Configuring a Secure Socket Layer (SSL) Certificate Template for Web Server"

Posted on 07.04.2020 Categories Certificate usage Tags Certificate template, Secure Sockets Layer (SSL), Chromium, Elliptic curves, Apple iOS, Apple Macintosh, RFC 5246, RFC 4492

Recent posts

  • Requesting Certificates with ML-DSA-Based Keys Through the Network Device Enrollment Service (NDES)
  • Configuring an SSL certificate binding for Microsoft Internet Information Server (IIS) fails with an error message when using ML-DSA-based keys
  • Requests for certificates using ML-DSA-based keys fail with the error message "The parameter is incorrect. 0x80070057 (WIN32: 87 ERROR_INVALID_PARAMETER)"
  • Cryptographic Hardening of SCEP Transactions for the Network Device Enrollment Service (NDES)
  • Automatic Publication of Certificate Revocation Lists Following a Certificate Revocation

Categories

  • Active Directory
  • Backup and restore
  • Basics
  • Certification Authority cluster
  • Certification Authority database
  • Certification Authority installation
  • Certification Authority maintenance
  • Certification Authority Web Enrollment (CAWE)
  • Certificate Enrollment Web Services
  • Certificate usage
  • Certification Authority
  • Code signing
  • Software development
  • Events
  • Functional test
  • High availability
  • Internet Information Services (IIS)
  • Network Device Enrollment Service (NDES)
  • Online Certificate Status Protocol (OCSP)
  • Penetration testing
  • Security
  • Smart card
  • TameMyCerts
  • Test environment
  • Troubleshooting
  • Windows operating system

Tags

Active Directory AEPolicy Authority Information Access (AIA) Apple iOS Apple Macintosh Auditing Autoenrollment BlackBerry Enterprise Mobility Suite Certification authority certificate Cache capolicy.inf CRL distribution point (CDP) Certificate Enrollment Policy Web Service (CEP) CERT_E_UNTRUSTEDCA Cert Publishers Certificate enrollment Certificate template certlm.msc certreq certutil Certificate Enrollment Web Service (CES) Chromium Certificate revocation list (CRL) CRYPT_E_REVOCATION_OFFLINE CryptoAPI Cryptographic service provider (CSP) CT_FLAG_SUBJECT_ALT_REQUIRE_DOMAIN_DNS Delta certificate revocation list (delta CRL) DisableExtensionList Domain Name System (DNS) Domain controller Microsoft Edge EDITF_ATTRIBUTESUBJECTALTNAME2 Extended Key Usage (EKU) Elliptic curves Enrollment Agent Certificate enrollment policy Enroll on Behalf of (EOBO) ESC1 ESC6 Event Viewer Exit module Firewall Group managed service account (gMSA) Group Policy Hardware security module (HSM) HTTP error 500 HTTP over SSL (HTTPS) Internet Information Services (IIS) In-place upgrade Issuance policy Kerberos Delegation (Kerberos) Key storage provider (KSP) LDAP Microsoft Intune Microsoft Outlook Migration ML-DSA Mobile device management (MDM) MS-WSTEP MS-XCEP Network Policy Server (NPS) NTAuthCertificates NTE_BAD_DATA PKCS#1 PKCS#7 Policy module Post-quantum cryptography Windows PowerShell Private key archival PSCertificateEnrollment Registration Authority (RA) Remote Desktop (RDP) Registry Relative distinguished name (RDN) RFC 6960 RFC 8894 RFC 2818 RFC 5280 RPC_S_SERVER_UNAVAILABLE Secure/Multipurpose Internet Mail Extensions (S/MIME) SafeNet SCEP SeBatchLogonRight Security hardening Security identifier (SID) SeImpersonatePrivilege SeServiceLogonRight Smart card logon Service principal name (SPN) Secure Sockets Layer (SSL) Subject alternative name (SAN) Subject distinguished name SubjectTemplate TameMyCerts Policy Module Trusted Platform Module (TPM) TPM Key Attestation Windows Hello for Business Wireshark

  • Home
  • About me
  • Imprint
  • Privacy policy

Copyright Uwe Gradenegger. All rights reserved. No liability for the accuracy of the information. Imprint Privacy policy