Re: Can we make this kind of certificate?

[Russ Housley <housley@xxxxxxxxxxxx>]

X.509 certificates do not have the capacity for multiple signatures, one 
from each of the "issuers."

Russ

At 09:31 AM 3/6/2004 +0900, Jaeho Yoon wrote:
> Dear experts,
>
> I have been studying the PKI in various environment. In doing that, I am 
> troubled with the needs of this kind of certificate.
>
> 'a certificate issued by multiple CAs'
>
> for example, RFC3280 certificate is
> Certificate = entity dependent field + CA dependent field + 
> Signature(entity+CA field)
>
> this certificate is
> Certificate = entity dependent field + [CA1 dependent field + 
> Signature(entity+CA1 field)] + [CA2 dependent field + Signature(entity+CA2 
> field)] + ...
>
> At first sight, it may have many problems, ex. path related things.
> But in some cases, it would be very useful, I think.
>
> Can we make this kind of certificate? I'd like to have your opinion.
> It is just my curiosity.
>
> Thanks.