Can a domain certification authority issue a certificate in accordance with GOST 34.10-2012?

Question

Active Directory

Tell me, is it possible to issue certificates in accordance with GOST 34.10-2012 through the central CA?

Answer 1

As far as I understand in PKI, you need an appropriate cryptographic provider (for example, CryptoPRO CSP ), on the basis of which a certificate template is created and ready-made certificates are issued. On the root CA, it is probably better not to conduct experiments, but on a subordinate CA - easily
CryptoPRO even has a test CA on Windows