What is serverAuth and clientAuth?

Viewed 5813

What are the usage, function, and how to use clientAuth and serverAuth? Just like extendedKeyUsage = critical, serverAuth, clientAuth, emailProtection

1 Answers

extendedKeyUsage says how the certificate can be used. clientAuth means it can be used to authenticate a client, i.e. authentication by client certificate when doing mutual authentication. serverAuth means it can be used to authenticate a server, which is the normal case when doing TLS.

For more see RFC 5280 section 4.2.1.12 Extended Key Usage.

Related