Page 83 of 226
Version: 3.3.5
– DR05 – 23.03.2017
Root certificate key usage
13.2.1.4
In the
“Key usage”
tab you will find key usage and extended key usage options. Neither key should be critical i.e.
you should leave the boxes marked Critical unchecked.
To create a root certificate, please select the following values in the left hand column:
Certificate Sign
CRL Sign
Selecting these options means that your root certificate can sign the client certificate and revocation lists.
Now click on
“OK”
to complete root certificate creation.
Your root certificate is now ready and you can now derive and sign your additional certificates.
