Which two attributes are required on a certificate so it can be used as a CA certificate on SSL Inspection? (Choose two.)

Which two attributes are required on a certificate so it can be used as a CA certificate on SSL Inspection? (Choose two.)

A. The keyUsage extension must be set to keyCertSign.

B. The common name on the subject field must use a wildcard name.

C. The issuer must be a public CA.

D. The CA extension must be set to TRUE.

View Answer

Answer: A,D

Explanation:

Reference: https://www.reddit.com/r/fortinet/comments/c7j6jg/recommended_ssl_cert/