The End of ClientAuth EKU…Oh Mercy…What to do?
If you’ve spent any time recently monitoring the cryptography and/or Public Key Infrastructure (PKI) spaces…beyond that ever-present “Post Quantum” thing, you may have read that starting in May of 20...
Published Dec 04, 2025
Version 1.0
Kevin_Stewart
Employee
Employee
Juergen_Mang
MVP
MVPThank you for the detailed article on this change. Everyone I've told about it so far has been surprised. But it can cause serious problems if you don't act in time.
For testing purposes I use my own CA Scripts that are OpenSource: https://github.com/JuergenMang/ca-script
For enterprise use a solution like HashiCorp Vault for certificate management and do not rely on custom scripts!