Security
Security

What version of X.509 certificates are supported (V1 or V3)?

by Juniper Employee on ‎01-26-2016 08:03 AM - edited on ‎09-22-2017 03:43 PM by Administrator Administrator (528 Views)

Question

What version of X.509 certificates are supported (V1 or V3)?

Answer

Juniper Networks supports both versions of X.509 certificates. However, you must use V3 if you want to use the SubjectAlternativeName extension field for a non-DN (distinguished name) Internet Key Exchange (IKE) ID type (for example, IP address, e-mail address, or fully qualified domain name [FQDN]).

 

For more information, see Understanding Certificates and PKI