It's incorrect to use "object identifer" in INF file of the "To enroll for an OCSP Response Signing certificate against a stand-alone CA"section. Please change it to "OID". $0 $0 [EnhancedKeyUsageExtension] $0 object identifer="1.3.6.1.5.5.7.3.9" $0 $0 If you use object identifer, it will not issue "OCSPsigning" certificate. $0 $0 $0$0 $0 Kurt Hudson replies: I have made these changes as requested.$0
↧