I'm using a Windows Server 2008 R2 domain controller with Active Directory Certificate Services installed. It's configured as an Enterprise Root CA.
I have configured a custom certificate template so that I can generate extended validation SSL certificates from the CA.
In many of the EV SSL certificates, the following OIDs are specified in the "Subject" field of issued certificates:
188.8.131.52 = ORGANIZATION TYPE
184.108.40.206.4.1.3220.127.116.11.2 = STATE
18.104.22.168.4.1.322.214.171.124.3 = COUNTRY
126.96.36.199 = Private Organization
188.8.131.52.4.1.3184.108.40.206.2 = Arizona
220.127.116.11.4.1.318.104.22.168.3 = US
I'm trying to see if there is already a place for me to specify these custom OIDs and their values to be used when requesting the certificate through Active Directory from my CA.
I took a look at an EV SSL Hotmail certificate, and its certificate has the OIDs above in its Subject field:
If I use the MMC certificate snap-in and select "local computer" and attempt to request a certificate using my custom certificate template using supplied values, I only see the following items, and none where I can specify an OID:
Does anyone have an idea of how I might accomplish this?