length of public Minimum: 1024 Bit Server certificates with a key length of the public key Recommended: 1024 bit are 2048 Bit or higher considered invalid by some recent operating systems. The continued use of 1024 bit length keys is not recommended, because several operating systems and browser vendors already have a deprecation policy for this key length. While the deprecation in browser-based scenarios does not have an immediate impact on EAP server usage, it is possible that system libraries and operating system APIs will over time penalise the use of short key lengths. or new certificates, 2048 bit or more is recommended Extension: TLS Web Server Even though the Extended Key Authentication certificate is used for Usage EAP purposes, some popular operating systems require the certificate extension "TLS Web Server Authentication" (OID: 1.3.6.1.5.5.7.3.1) to be present.
length of public key Minimum: 1024 Bit Recommended: 2048 Bit or higher Server certificates with a length of the public key 1024 bit are considered invalid by some recent operating systems. The continued use of 1024 bit length keys is not recommended, because several operating systems and browser vendors already have a deprecation policy for this key length. While the deprecation in browser-based scenarios does not have an immediate impact on EAP server usage, it is possible that system libraries and operating system APIs will over time penalise the use of short key lengths. or new certificates, 2048 bit or more is recommended Extension: Extended Key Usage TLS Web Server Authentication Even though the certificate is used for EAP purposes, some popular operating systems require the certificate extension "TLS Web Server Authentication" (OID: 1.3.6.1.5.5.7.3.1) to be present.
InstitutionalEduroamImplentationPlan_1.0.docx