intel/tdx-tools

PCK certificate extensions

shuk777 opened this issue · 1 comments

According to Intel® SGX PCK Certificate and Certificate Revocation List Profile Specification, the SGX extensions(fmspc,ppid, etc.) must exists. I parsed a PCK cert, and it seems these oids are contained in one x509 extension SGX extension(1.2.840.113741.1.13.1) instead of appear as separate x509 extensions. Is this how it's supposed to be? It's really hard to read different extensions from it.
image