Section 6: Considerations Certificate & CRL Profile Consider some extensions for achieving multi-domain PKI interoperability Repository Consider how to obtain the required information for path construction and validation in multi-domain PKI Path Validation Consider the path validation algorithm and parameters for multi-domain PKI Inter-domain consensus for cross-certification Policy mapping Validity of each cross-certificate validity of self-signed certificate Consider each CA key update |