[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Q: Where should do I put a max mount in a X.509v3 certificate?


At 1:50 PM -0300 3/3/02, Roberto Opazo Gazmuri wrote:
IETF-PXIX:

I would like to ask the WG opinion about “the correct” place to indicate
that a certificate should not be used to validate electronic signatures for
a mount over a determined maximum.

Here we are delegating in de RP the responsibility of validating the
certificate content to see if there is a limit and I have not seen a good
place to put this information. We need to indicate:
1.- There is a general limit, not for a specific transaction type
2.- The mount of the limit
3.- The type of money in witch the mount is expressed

Is there a standard extension for that?

Thanks,

Opazo, Roberto (roberto@xxxxxxxx)
CEO - www.acepta.com
Certification Authority for Chile

There is no standard extension for conveying this info. One might use the policy ID field and policy qualifiers to represent this info in a machine readable fashion, but we have generally advised folks to not use the policy qualifier field.

Steve