Arno Garrels wrote: > Hello, > > How do I get this MS-specific extension into a certificate? > SPC_FINANCIAL_CRITERIA_OBJID 1.3.6.1.4.1.311.2.1.27 > i.e. Value: 30 06 01 01 00 01 01 ff > I don't know if it's necessary at all, however in Vista I > cannot get rid of the nasty red security popups. It's either > this missing extension or may be just the fact that a cert has > to be issued by VeriSign, who knows? > > Arno Garrels
The thawte certificates seem to be acceptable with XP but they are no longer being accepted by Vista nor are they being accepted by Microsoft for their Windows Crash Reporting service. The problem appears to be that only the Verisign Code Signing CA is now a trust anchor for validating Authenticode signatures. It looks like I will have to buy a cert from Verisign when the current one expires. Jeffrey Altman
smime.p7s
Description: S/MIME Cryptographic Signature