[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Can we form certificates with just name and e-mail address



Stefan Santesson wrote:
> How do you form a certificate according to PKIX where the subjects name
> only consists of a name (commonName or GivenName + surname) and an e-mail
> address ?? It seams to be virtually impossible to do this.
>
> [...]
>
> What has historic debates concluded in?

I don't actually know the history here, but I would wager a suggestion:

Could you not leave the subject name empty and include both a rfc822Name
and a directoryName (which would then contain your given name and
surname attributes) in the subject alternate name extension?

//oscar

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature