Hi. In our project, we mark end entities with URNs and need to include these names in the certificates. We started with using subjectAltName.URI field for this (as URN is a "subtype" of URI). However, this practice clashes with RFC 3280 which explicitly requires absolute URL for the field. Is there any specific reason for excluding URNs from subjectAltName? Regards -- Milan Sova