Missing ‘Key Usage’ on a CA certificate: can sign certificates?
In Windows certificate store, an intermediate CA certificate without Key Usage extension is considered eligible (as long as it has isCA flag from Basic Constraints of course) for singing end entity certificates (such chain is… Continue reading Missing ‘Key Usage’ on a CA certificate: can sign certificates?