So Qualified Subordination is super important, it’s what really allows us to implement Least Privilege in PKI hierarchies. This concept is implemented in Windows XP as of SP3 because there was a back-port of the Windows Vista certificate chain validation logic included in SP3. With that said there is at least one difference between VISTA, … Continue reading XP and the undefined Name Constraints