Yes, technically constrained subordinate CA. When the subordinate's EKU contains TLS server auth, constraint means a finite list of DNS names and directory names in the name constraints extension.
> -----Original Message----- > From: Salz, Rich [mailto:[email protected]] > Sent: Tuesday, December 13, 2016 1:51 PM > To: Steve Medin <[email protected]>; Ryan Sleevi <ryan- > [email protected]> > Cc: Matt Palmer <[email protected]>; [email protected]; Peter Bowen > <[email protected]> > Subject: RE: [Trans] Redaction > > > > What the 23kb TCSC I created taught me was that there are orgs that need: > > TCSC means a sub-CA with a nameConstraints field?
smime.p7s
Description: S/MIME cryptographic signature
_______________________________________________ Trans mailing list [email protected] https://www.ietf.org/mailman/listinfo/trans
