All, This discussion can continue forever without getting anywhere so I propose a short-cut. The alternatives are: 1. Support it as an option 2. PKIX should limit direct support of information that could deprive privacy regardless if some parties want it 3. Finger-prints have no proved value or are still technically immature Anders