Extensions to support trust chains We can use Authority Key Identifier inside holder’s AC to point to PKC of AC issuer AKI will point to Alice’s PKC, and off we go using existing PKI rules We want to use Authority Information Access inside a holder’s AC to point to AC of AC issuer AIA will point to Alice’s AC |