certificate has unsupported critical extension

[1218100112]

May I ask why this error was reported, Certificate has unsupported Critical Extension, when an external CA was used to create a CA

[primetomas]

Then you first has to tell us when you encounter this message. If it's even in EJBCA?

[1218100112]

thanks，but we have configured the corresponding extensions in the Custom Extensions option. If Custom extensions can be used in the profile of the issued certificate, why can't custom extensions be used in the External CA? The system does not support it. Or do we have a configuration problem?

[1218100112]

Or a version problem

[primetomas]

This is not an EJBCA configuration, how you configure extensions in EJBCA does not affect standard RFC5280 validation processing. You should basically never make a custom extension that is critical.

Can you tell us more about what custom extension you have added?

I recommend simply removing the critical checkbox, unless you have a standard specificasion stating it must be critical.

[1218100112]

This is the content stipulated in the CCC specification. do you mean that custom extensions cannot use critical？

[primetomas]

Can you link to this specification? I'm merely guessing due to the lack of details here.