Freeradius certificate

• Certificate Compatibility

Windows client requirements: https://learn.microsoft.com/en-US/troubleshoot/windows-server/networking/certificate-requirements-eap-tls-peap#server-certificate-requirements

• Server Authentication OID = 1.3.6.1.5.5.7.3.1
• The name in the Subject line of the server certificate matches the name that's configured on the client for the connection.
• For wireless clients, the Subject Alternative Name SubjectAltName) extension contains the server's fully qualified domain name (FQDN).