On 01/08/2013 04:42 PM, Robert Moskowitz wrote: > CA:TRUE means it is a signing cert. In RFC 5280, app C.2 end-entity cert: > (g) the certificate is an end entity certificate, as the basic > constraints extension is not present; OK. If you want to suggest to Red Hat use "-extensions v3_req", you'll probably need to do so as a paying customer, in bugzilla. "why" probably isn't a question for this list. CentOS simply rebuilds the source that Red Hat provides. _______________________________________________ CentOS mailing list CentOS@xxxxxxxxxx http://lists.centos.org/mailman/listinfo/centos