On 01/08/2013 04:42 PM, Robert Moskowitz wrote:
CA:TRUE means it is a signing cert. In RFC 5280, app C.2 end-entity cert: (g) the certificate is an end entity certificate, as the basic constraints extension is not present;
OK. If you want to suggest to Red Hat use "-extensions v3_req", you'll probably need to do so as a paying customer, in bugzilla. "why" probably isn't a question for this list. CentOS simply rebuilds the source that Red Hat provides.