Page 1 of 1

Is a specialized CA necessary to generate PROFINET-specific extensions in a certificate?

Posted: 22 Aug 2025, 09:58
by Webinar_Question
Is a specialized CA necessary to generate PROFINET-specific extensions in a certificate?

Re: Is a specialized CA necessary to generate PROFINET-specific extensions in a certificate?

Posted: 22 Aug 2025, 13:28
by dominik_z
Webinar_Question wrote: 22 Aug 2025, 09:58 Is a specialized CA necessary to generate PROFINET-specific extensions in a certificate?
No, a special CA is not required (off-the-shelf OpenSSL does the job), despite the PN-specific extensions. Caveat: one has to accept that the CA signs extensions it cannot check semantically.