Usually, the encoding of characters and strings in certificates is not a topic of great interest to the users of a PKI. However, there are cases where the default settings of the certification authority do not provide the desired results.
As computing power becomes increasingly available, the need to use stronger cryptographic keys also increases. In this course, there is often a need (for example, because the keys have to be protected by a Trusted Platform Module) to use keys based on elliptic curves (ECC) . For their use, it is essential that compatibility with the intended use cases is ensured.
Below is a list of use cases for which I know the compatibility.
Internationalized Domain Names (IDNs) have been officially supported since Windows Server 2012 as part of the certification authority and its associated components.
However, if you want to use them in your certification authority certificates, there are some specifics to consider.
Continue reading "Umlauts in certification authority certificates"
Below is a description of the configuration settings required to ensure that a certificate hierarchy based on Active Directory Certificate Services complies with the Common PKI (formerly known as ISIS-MTT) standard.