12 maj 2010 kl. 16:23 skrev =JeffH:

> ..which is ambiguous because X.501 does not explicitly state which RDN in the 
> DN sequence is the most specific (it's implied) and there allegedly exist 
> non-trivial slices of current practice don't necessarily follow that 
> stipulation anyway (for whatever reasons).

rfc5280 claims that dn are hierarchical, and it make sense when you apply name 
constraints on the subject DN (permitted/excluded subtree).

Love


_______________________________________________
certid mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/certid

Reply via email to