(In reply to Michael Chang from comment #23) > How to check that? Is it "Code Signing" from x509 output ? As I understand it should be "Certificate Sign" X509v3 Key Usage: critical Certificate Sign, CRL Sign At least this was the only difference between old and new OBS certificates.