Re: Q: Where should do I put a max amount in a X.509v3 certificat e?

[Juergen Brauckmann <brauckmann@xxxxxxxxxxxxxx>]

Hello.

Tom Gindin wrote:
>       Since this "purchase limit" is intended as a constraint on signed
> orders, and those are signed by PKC's rather than AC's, the constraint
> needs to go into the PKC.  I also don't think the syntax is very complex
> (currency designator and amount - the only choice you need to make is
> whether to encode amount as Numeric String, Integer, or Real).

ETSI has an monetaryLimit statemtent for use with the qCStatement
extension defined in RFC3039.

The ETSI document id is "ETSI TS 101 862 V1.2.1". The document can be
obtained from pda.etsi.org, but basically it goes like this:

MonetaryValue::= SEQUENCE {
currency Iso4217CurrencyCode,
amount INTEGER,
exponent INTEGER}
-- value = amount * 10^exponent

Iso4217CurrencyCode ::= CHOICE {
	alphabetic PrintableString (SIZE 3), -- Recommended
	numeric INTEGER (1..999) }
-- Alphabetic or numeric currency code as defined in ISO 4217
-- It is recommended that the Alphabetic form is used

Regards
    Juergen