Home/ Questions/Q 7772287
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-06-01T16:51:16+00:00

I am generating a .jks with keytool and everything is ok. I am using

  • 0

I am generating a .jks with keytool and everything is ok.

I am using this command:

keytool -import -keystore KEYSTORE.jks -storepass "secret" -file MYCERT.crt

The problem is that I don’t have any idea about how to add a “Subject Unique Identifier” to the certificate I am generating.

According to this: http://en.wikipedia.org/wiki/X.509 (In the Structure of a certificate part) that property is optional but I need it for this case.

Thanks in advance.

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Editorial Team

    In a X509 Certificate everything is signed except the signature. It means that the subject unique identifier must be included during the certificate generation before it is signed by the issuer.

    Please note that unique identifiers is a deprecated element (x509 v2); In X509 v3 certificates the subject key identifier and authority key identifier extensions serve a similar purpose.

    The current RFC defining X509 certificate profiles (RFC 5280) specifies:

    CAs conforming to this profile MUST NOT generate certificates with
    unique identifiers. Applications conforming to this profile SHOULD
    be capable of parsing certificates that include unique identifiers,
    but there are no processing requirements associated with the unique
    identifiers.

    • 0