How to sign CSR with time stamp enabled

Discussion in 'Server Security' started by Patrik, Mar 27, 2009.

  1. Patrik

    Patrik Guest

    I got a time stamp server and need to renew its cert.
    But after signing the CSR with my Win 2003 CA, I found that some features
    like Enhanced Key Usage: Time Stamping (1.3.6.1.5.5.7.3.8) are missed.

    I have searched the net and found some tricks to set extension before
    signing. I did a trial but failed to do so.
    Please advise.


    echo 30 0A 06 08 2B 06 01 05 05 07 03 08>timestampoid.txt
    certutil.exe -setextension 35 2.5.29.37 1 @timestampoid.txt

    Thanks a lot!
     
    Patrik, Mar 27, 2009
    #1
    1. Advertisements

  2. Martin Rublik, Mar 27, 2009
    #2
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.