pkix-5----Page:16
1  2  3  4  5  6  7  8  9  10  11  12  13  14  15  16  17  18  19 

Two issues
Meaning of the indirectCRL boolean from the IDP extension.
What do we call “indirect CRL” ?

The indirectCRL boolean is absolutely necessary to signal the presence of “certificate issuer CRL entry extensions”.

The indirectCRL boolean is not necessary, if no “certificate issuer CRL entry extension” is present.

The name of the boolean could be changed to “multipleCAs”.
PPT Version