What is the difference between a critical and non-critical extension?
Originally Published: 2008-01-17
Last Modified: 2023-10-06
Article Number
Applies To
RSA Certificate Manager
Issue
Not sure if Critical or non-critical should be selected when issuing a certificate
Resolution
According to the X.509 standard, the user of a certificate should reject the certificate if an extension is flagged as critical and is not recognized. If the extension is flagged as non-critical and is aslo not recognized, the application may decide to accept the certificate anyway.
As an example, most browsers will recognize major extensions like KeyUsage, so it is a good practice to leave this extension as critical.
Related Articles
Fine grained role review with sign-off option and maintain action for all items of the role is generating a CR and the CR … Number of Views Critical Updates for RSA SecurID Access Components Used with the Cloud Authentication Service Number of Views RSA Announces RSA Authentication Manager 8.4 Patch 4 with New Features Making It Easier Than Ever to Adopt Modern MFA Auth… Number of Views VM malformed request seen in logs Number of Views Renaming an RSA Identity Governance & Lifecycle Notification Rule creates an orphan event in Scheduler Number of Views
Trending Articles
Don't see what you're looking for?
