RE: First submissions

> -----Original Message-----
> From: Jim Schaad (Exchange) [mailto:[email protected]]
> Sent: Monday, August 16, 1999 3:39 PM
> To: [email protected]
> Subject: RE: First submissions
> 
> 1.  The CN should reflect the algorithm so we don't end up 
> with cn=carl for
> both the RSA and DSS root certificates.

Agree.  Recommend that this be changed to CarlRSASelf and CarlDSSSelf.

While we're on the subject, should the EE certificates have the full name in
the CN also?  For instance, cn=AliceRSASignByCarl (currently it is
cn=Alice).

> 2.  The Key Usage needs to include CRL issuence as well.

Agree -- just so that we're on the same page, do you agree that it currently
indicates that keyCertSign is asserted?

I will add cRLSign to the next version.

Blake