RE: using more than one public key

["Nick Pope" <pope@xxxxxxxxxxx>]

his was a basic issue which was considered when deveoping the X.509
extensions and the decision was to keep to the rule that one X.509
certificate should have one AND ONLY ONE key.

Nick Pope

> -----Original Message-----
> From: Schwarz, Bernhard [mailto:B-Schwarz@telekom.de]
> Sent: 22 February 2000 09:30
> To: ietf-pkix@imc.org
> Subject: using more than one public key
>
>
> Trying to understand draft-ietf-pkix-qc-03.txt, Chapter 4,
> the following question appeared:
> If we have a Qualified Certificate containing more than one
> public key (different key pairs used for different purposes),
> is the strictly pointed out declaration
>    "... The associated private keys must be unique for the
>    subject, and must be maintained under the subject's sole
>    control. ..."
> to be used for each private key, the public key of which is
> provided in this certificate or only for the key(s) especially
> provided for non-repudiation use?
> Can somebody make that clear?
>
> Thank You
> Bernhard Schwarz
>