Re: First submissions

Jim Schaad (Exchange) wrote:
> 
> I really think that there are two things I would like to change about Carl's
> certificate.
> 
> 1.  The CN should reflect the algorithm so we don't end up with cn=carl for
> both the RSA and DSS root certificates.
> 2.  The Key Usage needs to include CRL issuence as well.
> 

Yes I'd agree with that. 

What are the thoughts about having E-mail protection in extended key
usage for the end user certificate examples?

Steve.

-- 
Dr Stephen N. Henson.   http://www.drh-consultancy.demon.co.uk/
Personal Email: [email protected] 
Senior crypto engineer, Celo Communications: http://www.celocom.com/
Core developer of the   OpenSSL project: http://www.openssl.org/
Business Email: [email protected] PGP key: via homepage.