PKCS#10 Certificate Requests in Web Enrollment; Information on Additional Attributes field is lacking

hello,

there plenty of information on how add san names via "additional attributes" box request unauthenticated san names. however, there no information how format requests other attributes, country code in san name. lot of certificate requests request "uk" country code, when should "gb". know doesn't matter in grand scheme of things, want know how format subject information submit in additional attributes, , other information can requested there. 

did lot of searching can see how add in san names. example:  
san:dns=mywebserver.domain.local&rfcsomething=192.168.1.50&dns=stuffandthings.domain.local

is there information or documentation out there has syntax other attributes request (like subject field or eku). 

thanks all.  

san attributes shall not used , ca shall refuse them. instead, certificate request should contain signed san extension: https://technet.microsoft.com/en-us/library/ff625722(v=ws.10).aspx

---

vadims podāns, aka powershell cryptoguy
weblog: en-us.sysadmins.lv
powershell pki module: pspki.codeplex.com
powershell cmdlet editor pscmdlethelpeditor.codeplex.com
check out new: ssl certificate verifier
check out new: powershell file checksum integrity verifier tool.

Windows Server  >  Security