August 2012
- XP and the undefined Name Constraints
So Qualified Subordination is super important, it’s what really allows us to implement Least Privilege in PKI hierarchies.
- Updated my script for Qualified Subordination testing
I did some testing with ECC and SHA2 today and as such decided to update my script for testing Qualified Subordination to make it easy to get certificates that use these algorithms.
- Using ECC keys in X509 certificates
Recently the CAB Forum published a document called the Baseline Requirements for the Issuance and Management of Publicly Trusted Certificates.
- Using SHA2 based signatures in X509 certificates
It’s been an exciting decade for cryptography; as a result we see smaller key sizes and weaker algorithms getting deprecated.
- How to get your own OID arc
X509 uses Object Identifiers (OIDs) to uniquely identify things, for example one assigns a OID to their Certificate Policy Statements (CPS) so that it is possible to programmatically detect if a certificate meets a…