Re: Qualified Certificates and the 43:d IETF Meeting

[egardner@xxxxxxxxx (Ella P. Gardner)]

Some folks don't like the fact that the X.500 standard unique identifier is
a bit string. That's why we used dnQualifier in the Allied Communications
Publication 133.

Ella

At 01:04 PM 12/10/98 -0500, david chadwick wrote:
>
>
>Russ Housley wrote:
>
>> Nick & Stefan:
>>
>> >>2)The standard attribute dnQualifier could be used instead of
serialNumber
>> >>(Th attribute "serialNumber is defined in RFC 2256 as being the serial
>> >>number of a device).
>> >>
>> >
>
>The X.500 standard defines a uniqueIdentifier attribute that might be better
>suited to the semantics than either serial number or dnQualifier.
>David
>
>
>>
>> >Yes, the SN is not in complete harmony regarding its definition and its
>> >use. However several other standardisation proposal has choosen SN for
>> >personal identifiers. The rationale behind that choice have been that most
>> >applications support and displays this attribute in a correct way.
>> >
>> >Is there an installed base using "dnQualifier" ?
>>
>> We include support of dnQualifier.
>>
>> I strongly prefer dnQualifier over serialNumber.
>>
>> Russ
>
>
>