Character encoding in the Subject Distinguished Name of certificate requests and issued certificates

Usually, the encoding of characters and strings in certificates is not a topic of great interest to the users of a PKI. However, there are cases where the default settings of the certification authority do not provide the desired results.

Continue reading "Character encoding in the Subject Distinguished Name of certificate requests and issued certificates"

Umlauts in certification authority certificates

Internationalized Domain Names (IDNs) have been officially supported since Windows Server 2012 as part of the certification authority and its associated components.

However, if you want to use them in your certification authority certificates, there are some specifics to consider.

Continue reading "Umlauts in certification authority certificates"

Description of the necessary configuration settings for the "Common PKI" certificate profile

Below is a description of the configuration settings required to ensure that a certificate hierarchy based on Active Directory Certificate Services complies with the Common PKI (formerly known as ISIS-MTT) standard.

Continue reading "Description of the necessary configuration settings for the "Common PKI" certificate profile"