On Mon, Sep 8, 2014 at 1:16 PM, Stephen Kent <[email protected]> wrote: > The current pre-cert model requires a CA to be able to issue two certs with > the same serial number.
The CA may use a Precertificate Signing Certificate to sign the Precertificate, and then sign the final certificate with the production CA certificate. Then, there would be no duplicate serial number issues. Cheers, Brian _______________________________________________ Trans mailing list [email protected] https://www.ietf.org/mailman/listinfo/trans
