Hello,
I need to generate a subordinate CA certificate for a non-Windows piece of infrastructure. Is there guidance published anywhere that explains the process for ensuring that the certificate request that is submitted to the Microsoft root CA has the required key usages & critical extensions?