Can someone tell me the difference between CSR version and certificate version?

I want to generate an X509 v3 certificate using CSR (RFC2986), but RFC says that PKCS10 (CSR) only supports v1. Can someone tell me the difference?

+4
source share
1 answer

The PKCS # 10 version field does not apply to the version of the requested X.509 certificate.

The version field is used to describe the format of the subsequent ASN.1 object. The correct decoder must first read the version and then decode the remaining fields of the encoded object in accordance with this value.

Current formats:

  • X509 certificate version is 3.
  • PKCS # 10 CSR version 1
+4
source

All Articles