On 6 October 2016 at 06:40, Ilari Liusvaara <ilariliusva...@welho.com> wrote: > The only issue that comes to mind is where extensions that are specific > to the certificate chain instead to the certificate go.
Let's keep it simple. I would put these on the EE cert. That is the entry that has the most chance of being looked at. _______________________________________________ TLS mailing list TLS@ietf.org https://www.ietf.org/mailman/listinfo/tls
