Re: Q: Where should do I put a max amount in a X.509v3 certificat e?

["todd glassey" <todd.glassey@xxxxxxxxxxxxxxxx>]

So perhaps PKIX should embrace this structure as a basic method of
representing a monetary value.  The more we all come to structural agreement
about what our variously protocols are to do, the easier it will be to make
the interoperable.

Todd

>
> ETSI has an monetaryLimit statemtent for use with the qCStatement
> extension defined in RFC3039.
>
> The ETSI document id is "ETSI TS 101 862 V1.2.1". The document can be
> obtained from pda.etsi.org, but basically it goes like this:
>
> MonetaryValue::= SEQUENCE {
> currency Iso4217CurrencyCode,
> amount INTEGER,
> exponent INTEGER}
> -- value = amount * 10^exponent
>
> Iso4217CurrencyCode ::= CHOICE {
> alphabetic PrintableString (SIZE 3), -- Recommended
> numeric INTEGER (1..999) }
> -- Alphabetic or numeric currency code as defined in ISO 4217
> -- It is recommended that the Alphabetic form is used

The only thing it doesn't support is an internal "Policy Of Use" statement
or OID. That means that anything that uses this financial value designator
may need a larger container structure to contain the Policy

>
> Regards
>     Juergen