Re: Verifying certificate chains with different policies

[zhuqingj@xxxxxxxxxx]

Hi, Dean:

     I haven't considered your problem in detail. But I think it would be
helpful to refer to SET certificate chain.
     In the SET certificate chain, RA is Root CA, ICA is Brand CA, OCA may
include Cardholder CA, Merchant CA and PaymentGateway CA, then the
Cardholder, Merchant and PaymentGateway would be the EEs.

Thanks,
ZHU Qing Jiu
Staff Research Member,
e-business Technologies & Solutions,IBM China Research Lab