In the documentation for the function x509.CreateCertificateRequest, the text states:
The following members of template are used: Subject, Attributes, SignatureAlgorithm, Extensions, DNSNames, EmailAddresses, and IPAddresses.
This implies that we read the CertificateRequest.Extensions field when creating the CSR, and that this would be the correct slice into which we place desired X509v3 extensions; however, this is inaccurate, since we actually only read the .ExtraExtensions field. The documentation should be altered to reflect this.
In the documentation for the function
x509.CreateCertificateRequest, the text states:This implies that we read the
CertificateRequest.Extensionsfield when creating the CSR, and that this would be the correct slice into which we place desired X509v3 extensions; however, this is inaccurate, since we actually only read the.ExtraExtensionsfield. The documentation should be altered to reflect this.