I have just submitted draft-saintandre-rfc3920bis-05, including a first pass at updated rules for certificate generation and validation. It will be posted at ietf.org soon, but until then you can find it here:
http://www.xmpp.org/internet-drafts/draft-saintandre-rfc3920bis-05.html Enjoy! Peter -- Peter Saint-Andre https://stpeter.im/
smime.p7s
Description: S/MIME Cryptographic Signature
