go/doc/next/6-stdlib/99-minor/crypto/x509/71746.md

153 B

[CreateCertificate] now uses truncated SHA-256 to populate the SubjectKeyId if it is missing. The GODEBUG setting x509sha256skid=0 reverts to SHA-1.