Home/ Questions/Q 3632278
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-05-19T00:30:19+00:00

How can I add the Server Authentication EKU to a CSR or private key

  • 0

How can I add the “Server Authentication” EKU to a CSR or private key using Keytool?

Here is what i’m doing:

  1. Generate key-pair with “>Keytool -genseckey -dname=”CN=”my.server.com” …
  2. Generate CSR using the key-pair created in step #1.
  3. Submitting the CSR to a Windows Enterprise CA, asking for a Web Server cert.

The CA rejects the CSR with “The certificate is not valid for the requested usage.”. How can I add the “requested usage” using keytool so that the CA will issue the cert?

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Editorial Team

    You can do this only with the JDK7 or later version of keytool. OpenJDK 7 should have this version.

    • 0