Dealing with Microsoft's broken SCEP implementation

Peter Gutmann <[email protected]> Tue, 25 Apr 2017 07:48:36 +0000
Newsgroups gmane.comp.encryption.cryptlib
Message-ID <[email protected]>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