RE: Q: Where should do I put a max amount in a X.509v3 certificate?

["Yee, Peter" <pyee@xxxxxxxxxxxxxxx>]

Tim suggests using a policy qualifier, private extension, or
subject directory attribute.  (And OCSP, with which I really have
to disagree respectfully).  I'll offer another alternative: attribute
certificates.  These seem to be a natural fit and were suggested for
just such a purpose.

Sure, I'm glossing over the plethora of software that actually
supports ACs, but most of the other suggestions aren't implemented
either. :-)

						-Peter Yee
						pyee@xxxxxxxxxxxxxxx