New Post: Encoding a custom extension so Windows recognizes it

Gents,

I have successfully encoded and added a custom extension to requests, which then show flagged as the OID is named in Active Directory. E.g.

certutil -f -oid 1.2.3.4.5.6.7.8 "Some Extension" 1033

I then encode the extension as a DER string and add it to the pending request. After issuing the certificate, the extension is shown as hex.

Some Extension 6b 00 03 04 03 ...

Is there a way to display it in a more readable way? I am adding an email-address btw. If I click on the field, the value is encoded / displayed with dots between each character.

Nothing serious, but maybe someone knows :)

Thanks,

MMF