How to add extension attributes to a csr generated by bouncycastle (1.5.1)

Question

Q1: Is there a way to add custom extention attributes (e.g. CertificatePolicies, ExtemdedKeyUsage, KeyUsage, Admission,...) to an CSR generated with bouncyCastle 1.5.1?

Q2: Will a CA take extention attributes into account at all?

score 1 · Accepted Answer · edited May 23 '17 at 11:57

1

Q1: See Adding attributes to certificate request, java + bouncycastle 1.48

Q2: This may depend on the CA, but I think the answer is usually "no". Certainly no CA will just copy CertificatePolicies, KeyUsage or ExtendedKeyUsage from your CSR to the certificate, as that would be horribly insecure.

edited May 23 '17 at 11:57

Community

1
1

answered Sep 23 '14 at 13:24

Pasi

2,606
18
14

How to add extension attributes to a csr generated by bouncycastle (1.5.1)

1 Answers1