Important Notice: Our web hosting provider recently started charging us for additional visits, which was unexpected. In response, we're seeking donations. Depending on the situation, we may explore different monetization options for our Community and Expert Contributors. It's crucial to provide more returns for their expertise and offer more Expert Validated Answers or AI Validated Answers. Learn more about our hosting issue here.

What profile should the CA and signer certificates follow?

April 26, 2017ca certificates Follow profile signer

0

Posted

What profile should the CA and signer certificates follow?

1 Answer

0

Posted

• The CA certificate should be a version 3 X.509 certificate with the keyUsage and basicConstraints set correctly (to keyCertSign and TRUE, respectively). Note that Nokia also allows for version 1 X.509 certificates (that is, CA certificates without extensions), although these are deprecated. The signer certificates should be version 3 X.509 certificates and have the extendedKeyUsage extension with id-kp-codeSigning included and the keyUsage extension with the digitalSignature bit set. MIDP 2.0-enabled terminals support the RFC3280 path validation algorithm except for policy mapping and name constraints.