9 ms·
Root CAs can be configured to only attest certain TLDs (in this case .gov) via X509v3 Name Constraint. This is how dn42 does it: https://dn42.dev/services/Cert
by nickname-derail 3y ago
Root CAs can be configured to only attest certain TLDs (in this case .gov) via X509v3 Name Constraint.
This is how dn42 does it: https://dn42.dev/services/Certificate-Authority.md https://dn42.dev/services/Certificate-Authority.md