RFC 5280 defines the SAI extension, and it says:
This profile defines one access method to be used when the subject is
a CA and one access method to be used when the subject is an end
entity. Additional access methods may be defined in the future in
the protocol specifications for
In response to Russ:
On Thu, Dec 08, 2022 at 10:20:54AM -0500, Russ Housley wrote:
> RFC 5280 defines the SAI extension, and it says:
>
>This profile defines one access method to be used when the subject is
>a CA and one access method to be used when the subject is an end
>entity.
