There are a number of technical constraints a Certificate Authority can put into place on a subordinate Certificate Authority; the general concept is referred to as Qualified Subordination. One of the most important ways to constrain a certificate is through by restricting what it can be good for. The foundation for such a constraint is … Continue reading MSRC 2718704 and Nested EKU enforcement