[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: About RFC 3280bis
6.1.5 has remove the word 'entity', this seems a major change
because it now also specifies a path validation algorithm for
CA certs.
But, 6.1.6 has not be updated to also output information that
are necessary to determine later or earlier whether the CA
certificate can be used to sign a particular certificate.
For example, whether it can sign another ca cert or not,
or the permitted and prohibited subtrees.
(modulo the option to augment the input parameters)