> a) say nothing and rely on the CA doing the right thing and how has that worked out? heck, it does not always work out when clearly specified.
At Thu, 10 Mar 2016 11:55:48 +0900, Sean Turner wrote: > * SIA - allow SIA in the PKCS #10 and rely on the CA to discards it > and issue a properly formed certificate. > > * EKU - allow EKU but not require EKU in the PKCS #10; if present, the > EKU must have the correct OID. if eku missing in pkcs#10, put correct eku in cert, and issue randy _______________________________________________ sidr mailing list [email protected] https://www.ietf.org/mailman/listinfo/sidr
