Extensions (Certificate Enrollment API)
The X.509 version 3 certificate format identifies multiple extensions that can be added to a certificate. The extensions provide enhanced information about key usage, certificate policies and constraints, alternative name forms, and more. You can use the IX509Extension interface to define an extension value. Many of the common extensions can be created by using predefined interfaces derived from IX509Extension. A collection of extensions is added to a certificate request by including the collection in the request attributes. For more information, see the following topics: