[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: FQDN goes in commonName or domainComponent?
At 11:00 AM -0800 11/15/02, Brian Korver wrote:
>It's more-or-less standard in several protocols (SSL for instance),
>but I didn't mean standard in the sense of appearing in some
>document (although that might be true too).
>
>The issue isn't whether to use subjectAltName. That is the right thing
>to do. The issue is: if someone is going to place a domain name in
>SubjectName (perhaps because it's a v1 certificate? :), then what
>attribute should be used?
DC, period. If you think you can put it in CN, why not put it in O? Or OU?
--Paul Hoffman, Director
--VPN Consortium