[IETF-PKIX] CMP question.

[Jakob Bjerre Jensen <bjerre@xxxxxxxxxxxxxxx>]

'Certificate Management Protocols' feb. '98, says that

    'Certification may only be requested for one locally
    generated public key (for more, use separate PKIMessages)'

But the body structure

CertReqMessages ::= SEQUENCE SIZE (1..MAX) OF CertReqMsg

CertReqMsg ::= SEQUENCE {
    certReq   CertRequest,
    ... }

CertRequest ::= SEQUENCE {
   ...
    certTemplate  CertTemplate,
   ... }

CertTemplate ::= SEQUENCE {
  ...
    publicKey    [6] SubjectPublicKeyInfo  OPTIONAL,
  ...}

seems to allow multiple requests for key certifications in the same
PKIMessage.

Could someone explain this to me?


- Jakob