3.2.2.6.3.1.1 PropID=0x0000001D (CR_PROP_TEMPLATES) "Configured Certificate Templates"

  • Article

The client requested to know the list of certificate templates that are configured for this CA.

The CA MUST return the name and OID of each certificate template in its certificate template table where the value of the Certificate_Template_IsConfigured is True.

The returned string MUST have the following format:

"TemplateName1\nTemplateOID1\nTemplateName2\nTemplateOID2...\nTemplateNameN\nTemplateOIDN\n\0" where

  • TemplateName1 is one of the values of the cn attribute of the certificate template object that is stored in the Certificate_Template_Data column.

  • TemplateOID1 is the value of the msPKI-Cert-Template-OID attribute ([MS-CRTD] section 2.20) of the certificate template stored in the Certificate_Template_Data column.<131>

    Note If the certificate template does not have the msPKI-Cert-Template-OID attribute, then the value of TemplateOID1 is empty. The CA MUST return the configured certificate template as a [UNICODE] string through a CERTTRANSBLOB (section 2.2.2.2) structure.

    Marshaling rules for CERTTRANSBLOB are specified in section 2.2.2.2.