X509 Certificate Extensions

[reaperhulk]

This is a tracking issue for landing support for all extensions in RFC 5280.

Must support:

• Authority Key Identifier
• Subject Key Identifier
• Key Usage
• Subject Alternative Name
• Basic Constraints
• Extended Key Usage
• CRL Distribution Points
• Authority Information Access
• Certificate Policies

[kevgliss]

+1 For this I have almost completed a port of my app off of M2Crypto onto this library. But I am still missing he ability to grab data from the subjectAltName extension.

[schlenk]

Maybe add Certificate to the issue title, as your list misses the X509 CRL extensions. But in general a pretty good thing and probably much nicer than having to use pyasn1 to parse all those by hand.

[reaperhulk]

Good call @schlenk, I've added certificate to the title to prevent confusion. CRL extensions will come later :)