x509certificate

I'm creating a certificate request from my domain controller for use in IdentityServer3 (ID3). In the "Key Usage" section of the Certificate Properties dialog, I see a list of key usages: CRL signing Data encipherment Decipher Only Digital Signature Encipher Only Key agreement Key encipherment Key certificate signing Non repudiation The question is straightforward: what key usages does ID3 require of its signing certificates? I can't find anything in the ID3 documentation besides "use a certificate". I suppose it's also possible that all certificates are created "equal", and the first question

We're developing a microservices app on Kubernetes. One of the microservices is IdentityServer instance. Initially, I want to test the solution locally on Docker to make sure it works. For this purpose, I want to copy the certificate to appsettings.json. Eventually this value will be replaced by a Kubernetes secret. In my startup class this is how I'm trying to load my certificate: services.AddIdentityServer() .AddSigningCredential(GetIdentityServerCertificate()) .AddConfigurationStore(... private X509Certificate2 GetIdentityServerCertificate() { var clientSecret = Configuration["Certificate"]