Skip to content

Commit d3bd2ae

Browse files
committed
added note about cert sizes in practice
1 parent 485ca63 commit d3bd2ae

File tree

1 file changed

+3
-0
lines changed

1 file changed

+3
-0
lines changed

docs/users-manual/application-piv/cert-size.md

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -20,6 +20,9 @@ limitations under the License. -->
2020

2121
It is possible to store up to 24 private key/certificate pairs in the PIV slots for YubiKeys with firmware version 4.x and higher. However, there are limits to the size of each certificate and the total space available for all certificates.
2222

23+
> [!NOTE]
24+
> In practice, the size of a key/certificate pair is determined by the choice of algorithm and key length (e.g. RSA 1024 vs RSA 4096), certificate complexity (e.g. use of OIDs, size attributes), the presence of PIV attestation objects, etc.
25+
2326
## Maximum size for a single certificate
2427

2528
If you attempt to load a certificate that is larger than the key's maximum allowable certificate size (as indicated in the table below), the YubiKey will reject it, and the SDK will throw an exception.

0 commit comments

Comments
 (0)