Thank you very much!
I think golang implement might be strict. Maybe I should use openssl or cgo
calling other language implement to parse it.
在 2019年7月24日星期三 UTC+8下午9:28:55，Amar Akshat写道：
>
> I think the extensions in your certificate might be invalid. Namely CRL
> Distribution Points: 2.5.29
I think the extensions in your certificate might be invalid. Namely CRL
Distribution Points: 2.5.29.31
X509v3 CRL Distribution Points:
SEQUENCE {
4373: OBJECT IDENTIFIER cRLDistributionPoints (2 5 29 31)
4421: OCTET STRING 00
: }.
Per the RFC https:
