For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

The End of ClientAuth EKU…Oh Mercy…What to do?

If you’ve spent any time recently monitoring the cryptography and/or Public Key Infrastructure (PKI) spaces…beyond that ever-present “Post Quantum” thing, you may have read that starting in May of 20...
Published Dec 04, 2025
Version 1.0
certficate
EKU
pki
security
ssl
tls
Juergen_Mang's avatar
Juergen_Mang
Icon for MVP rankMVP
Dec 09, 2025

Thank you for the detailed article on this change. Everyone I've told about it so far has been surprised. But it can cause serious problems if you don't act in time.

For testing purposes I use my own CA Scripts that are OpenSource: https://github.com/JuergenMang/ca-script

For enterprise use a solution like HashiCorp Vault for certificate management and do not rely on custom scripts!