February 12, 2002
Practical Aspects of Modern Cryptography
33
More certificate extensions
nCertificate policies
nInformation identifying the CA policy that was in effect when the cert was issued
nPolicy identifier
nPolicy qualifier
nExplicit text
nHash reference (hash + URI) to a document
nX.509 defers cert semantics to the CA’s issuing policy
nMost CA policies disclaim liability