Re: How to identify certs to users

[pgut001@xxxxxxxxxxxxxxxxx (Peter Gutmann)]

BJUENEMAN@novell.com writes:

>Contrary to how most public CAs do it, at least so far, the e-mail address is
>included in the subjectAltName as per the PKIX RFC, and to our pleasant
>surprise all of the e-mail packages we have encountered to date have been 
>able to handle that format correctly.
>
>Although we could have, we chose not to include an e-mail address of the form
>subjectAltName="Robert R. Jueneman" <bjueneman@novell.com> , in part because
>most e-mail packages would just as easily accept "President William Jefferson
>Clinton" <bjueneman@novell.com>.

D'you mean they'll accept that as an rfc822Name?  Are they supposed to do that?

Peter.