Hi,

Hi folks: How could I check that the special Microsoft OIDs have been included on the certificates? Thanks a lot in advance!

the client or the server? what you want to do is eg openssl x509 -text -in server.certificate-file.der you should see something like X509v3 Extended Key Usage: TLS Web Server Authentication that means it got it. likewise the client (though the desc is different) - X509v3 Extended Key Usage: TLS Web Client Authentication IIRC alan