Jennifer J-N Liu wrote:
I opened the p12 file, besides the certificate, there is an extention
portion with fields like "Authority Key Identifier", "Basic Constraint",
"Netscape Comment", etc. What is the purpose for it? How to get rid of it?
(or not to have it exported?)
Those are extensions inside the certificate itself.
All modern certs from modern CAs have extensions.
The standards REQUIRE some of them, such as basic constraints.
Your PKCS12 tool is showing them to you, but they have nothing to do
with PKCS12 per se'. They are part of the data signed by the cert's
issuer, and cannot be removed except by the cert's issuer.
_______________________________________________
mozilla-crypto mailing list
[EMAIL PROTECTED]
http://mail.mozilla.org/listinfo/mozilla-crypto
