Issues

• Suggestion: extension criticality checks for OCSP Responder certificates (BR 7.1.2.8.2)

  digicert/pkilint#209 · Filter by author ChyaHungTsai opened on Oct 12, 2026
  

• Add support for the sha512ECDSA AlgorithmIdentifier in S/MIME signature algorithm validations

  digicert/pkilint#207 · Filter by author attilarozgonyi opened on Oct 6, 2026
  1

• High processing time and memory usage when linting large CRLs

  digicert/pkilint#206 · Filter by author ta-eamon opened on Sep 20, 2026
  2

  

• Update ASN.1 SIZE constraint for CABFOrganizationIdentifier.registrationStateOrProvince

  blocked
  digicert/pkilint#198 · Filter by author CBonnell opened on Apr 21, 2026
  1

• Misissued certificate example: malformed stateOrProvinceName containing embedded C=JP

  digicert/pkilint#180 · Filter by author ONO-Fumiaki opened on Jan 8, 2026
  2

• Comparison of pseudonym and cn in multipurpose sponsor-validated certs

  digicert/pkilint#155 · Filter by author romanf opened on Apr 9, 2025
  3

• Check Certificate Policies in S/MIME intermediates

  enhancement
  digicert/pkilint#114 · Filter by author robstradling opened on Sep 30, 2024
  1

• Support enforcement of additional required and allowed extended key usages (EKUs)

  enhancement
  digicert/pkilint#94 · Filter by author christopherincanada opened on Jul 31, 2024

• Support enforcement of additional requirements and allowed policy identifiers

  enhancement
  digicert/pkilint#77 · Filter by author christopherincanada opened on May 10, 2024
  2

• Create reference table of issues reported by pkilint

  documentation
  digicert/pkilint#64 · Filter by author ralienpp opened on Mar 27, 2024
  2