Re: Can I add more than one e-mail addresses as subjAltName extionsion in X.509 cert

2010-05-17 Thread Eddy Nigg
On 05/17/2010 06:22 PM, From Jean-Marc Desperrier: Eddy Nigg wrote: - Do other applications (like thunderbird and other mail), would make sure that they search through all the e-mail addresses to look for a match? Yes, this appears to be the case. IIRC, they do but they are some place where

Re: Can I add more than one e-mail addresses as subjAltName extionsion in X.509 cert

2010-05-17 Thread Jean-Marc Desperrier
Eddy Nigg wrote: - Do other applications (like thunderbird and other mail), would make sure that they search through all the e-mail addresses to look for a match? Yes, this appears to be the case. IIRC, they do but they are some place where only one adresse will be printed, the first of the

Re: Can I add more than one e-mail addresses as subjAltName extionsion in X.509 cert

2010-05-15 Thread Eddy Nigg
On 05/15/2010 02:41 PM, From Subrata Mazumdar: Hi, Hi Subrata, I can answer you some of the questions below. Can I add more than one e-mail addresses as subjAltName extionsion in X.509 cert? Yes, certainly. Since, value type of subjAltName is GeneralNames, I know I am allowed to do

Can I add more than one e-mail addresses as subjAltName extionsion in X.509 cert

2010-05-15 Thread Subrata Mazumdar
Hi, Can I add more than one e-mail addresses as subjAltName extionsion in X.509 cert? Since, value type of subjAltName is GeneralNames, I know I am allowed to do that syntactically. My questions are : - Does this fall within the best practices for X.509 based PKI? - Are the NSS APIs