Export Package Public Keys Only in Top Secret

Products

• Top Secret

Issue/Introduction

When Exporting a signed certificate using format PKCS12DER, the signing chain is also exported.
If the same certificate is Exported using format CERTB64 to send only the public key, the certificate is exported without the private key but the signing chain is not.   Is there a way to Export a certificate chain with only the public keys?

Resolution

PKCS12DER format is used to Export private keys and many times those certificates have been signed and there is a signing chain.  The format will EXPORT the chain if it finds it in the Top Secret database.  This is refered to as a "package".  But when only exporting a public key, there is no need to verify the signing of the key so it will only send the one certificate.