Skip to main content

Authority key identifier (AKI)

The Authority Key Identifier (AKI) extension contains the 20-byte SHA-1 hash of the issuer's public key.

JSON structure example

"extensions": {
  "aki": {
    "critical": false,
    "allow_critical_override": true,
    "include": "yes"
  }
}

Parameters

tabel 1. Parameters: Authority key identifier (AKI)

Name

Type

Required/optional

Possible values

critical

Boolean

Optional

Specifies whether the extension is marked as critical. Supported values include:

  • true: (default) Marks the extension as critical

  • false: Does not mark the extension as critical

allow_critical_override

Boolean

Optional

Specifies whether the critical setting can be overridden in the certificate profile or enrollment request. Supported values include:

  • true: (default) Allows the critical setting to be overridden in the certificate profile or enrollment request

  • false: Uses the critical setting defined in the certificate template

include

String

Optional

Specifies whether the extension is included in the attribute certificate. Supported values include:

  • yes: (default) Always includes the extension

  • no: Excludes the extension

  • optional: Includes the extension when a value is provided.