Re: x.509 v3 Certificates and Compatbility

[Stephen Kent <kent@xxxxxxx>]

Brad,

>Let's narrow the scope down.  Within a corporation they have their own
>CA that issues a certificate to all of its' employees.  Using the
>different extensions shouldn't they be able to use their one
>certificate for everything within their domain (web, S/Mime, VPN, etc.)?

It might be feasible, IF each application had the same set of requirements
with regard to extsnsions, name forms, and security considerations.  So far
that has not been the case, though there may be more convergance over time.


Steve