Certificate Issuer Extension Clarified meaning where name forms other than a DN are encoded/included Format is GeneralNames, so multiple instances and multiple types may appear Open issue: should 3280bis limit conforming implementations to DNs in the Certificate Issuer field? This would be consistent with our requirement that all CAs have DNs. |