Re: Sample certificate sites

[Peter Williams <peter@xxxxxxxxxxxx>]

i think it would be a service to the profiling community
if you (as a result of this activity) publish to
anonymous accessors a set of certificates which are
conformant to the PKIX-1 I-D, which explore
some of the more interesting options within
that option space, inclduing char sets, length maximums,
policy values, std qualifiers, etc, etc.

Look at it as good advertising for yourself, or your
product/service etc. We found lots of issues (and new business
partners) when providing a similar community service for the
SET-specified certficates.

Peter.


At 05:42 PM 1/15/97 -0500, Mark Bartel wrote:
>I've resolved my character set questions (ie. figured out
>UniversalString, decided to ignore TeletexString) and it all seems to
>work fine, but I'd like to have certificates created by someone else
>that contain UniversalStrings to test it on.  Just my general level of
>paranoia.
>
>I've tested previously by using certificates from Verisign, in
>addition to the samples that came with the various tools I use.  I'd
>like to test with certificates from other vendors (not necessarily
>containing UniversalString values).  Where are good sources of sample
>certificates?
>
>- Mark Bartel
>
>