Re:Running one’s own root Certificate Authority in 2023
by wejn on Sunday September 17, 2023 @09:44AM
(#37544999)
This isn’t strictly true.
If you want to uphold the name constraints in your CA cert, mark the field as critical. At that point clients that don’t understand them should fail validation of the CA cert.
If you want to uphold the name constraints in your CA cert, mark the field as critical. At that point clients that don’t understand them should fail validation of the CA cert.