pkix-5----Page:14
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19
|
Indirect CRLs (CA name ambiguity) There is the need to add the following: “In order to prevent CA DN ambiguity, a CRL Issuer SHALL not accept to manage revocation status information for a given CA DN, if it already manages revocation status information for another CA that has the same DN”. |