Rob: > "If it could be defined in ASN.1, then it MUST be defined in ASN.1". > > Does that accurately capture what you're both saying?
I'm saying that certificate extensions are OCTET STRING wrapped ASN.1 structures. That is what RFC 2459, RFC 3280, and RFC 5280 all say. The SubjectAltName extension includes a choice for URI, and it is carried in a single string, not broken into the ABNF parts. Russ _______________________________________________ Trans mailing list [email protected] https://www.ietf.org/mailman/listinfo/trans
