Stefan Santesson wrote:
In this capacity, OC extensions can be deployed reactively, while PI needs to be in place in existing certificates to work.
Actually, that's a good point. I should add it to the -03 version if/when I make one. S.