What is the difference between a critical and non-critical extension?
Originally Published: 2008-01-17
Last Modified: 2023-10-06
Article Number
Applies To
RSA Certificate Manager
Issue
Not sure if Critical or non-critical should be selected when issuing a certificate
Resolution
According to the X.509 standard, the user of a certificate should reject the certificate if an extension is flagged as critical and is not recognized. If the extension is flagged as non-critical and is aslo not recognized, the application may decide to accept the certificate anyway.
As an example, most browsers will recognize major extensions like KeyUsage, so it is a good practice to leave this extension as critical.
Related Articles
Critical Updates for RSA SecurID Access Components Used with the Cloud Authentication Service Number of Views Fine grained role review with sign-off option and maintain action for all items of the role is generating a CR and the CR … Number of Views RSA Announces RSA Authentication Manager 8.4 Patch 4 with New Features Making It Easier Than Ever to Adopt Modern MFA Auth… Number of Views VM malformed request seen in logs Number of Views RSA-2023-11: RSA Governance and Lifecycle Security Update for SUSE Linux Enterprise Server Vulnerabilities Number of Views
Trending Articles
Report preview and/or generation fails with 'java.lang.NoClassDefFoundError: Could not initialize class net.sf.jasperrepor… How to manipulate imported RSA SecurID Software Token(s) on an iPhone or iPad device How to set up the REST RSA SecurID Authentication API for Authentication Manager 8.2 SP1 RSA Authentication Manager 8.9 Patches and Hotfixes Readme RSA MFA Agent 2.5 for Microsoft Windows Installation and Administration Guide
Don't see what you're looking for?
