I'm writing a tool to generate self-signed X509 certificates and X509 certificate requests and I'm wondering how the "critical" property of the SubjectAlternativeName (OID 220.127.116.11) should be handeled. The documentation isn't too clear for me.
- Make it critical
- Make it non-critical
- Let the user decide
- Ask the question on stackoverflow instead ?