amazon-archives / certlint

X.509 certificate linter
Apache License 2.0
157 stars 42 forks source link

False positive for cert policy explicit text #7

Closed guidolotito closed 8 years ago

guidolotito commented 8 years ago

Some certs are flagged with “ERROR: Certificate Policy explict text must not be VisibleString or BMPString”. According to http://tools.ietf.org/html/rfc6818, which updates certain sections of RFC5280, “VisibleString or BMPString are acceptable but less preferred alternatives.”

An example is https://crt.sh/test/?id=12155302.

BTW, in the error message, "explict " should be "explicit "