RD Numbers Certificate chain four deep, each certificate with PKIX IP Extensions Two scenarios: RA receiver does not have certificates cached, so it must use DCS/DCA exchange (slower) RA receiver has all needed certificates cached Measured time from sending RA until receipt of DAD NS. |