[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: FQDN goes in commonName or domainComponent?



At 11:00 AM -0800 11/15/02, Brian Korver wrote:
>It's more-or-less standard in several protocols (SSL for instance),
>but I didn't mean standard in the sense of appearing in some
>document (although that might be true too).
>
>The issue isn't whether to use subjectAltName.  That is the right thing
>to do.  The issue is:  if someone is going to place a domain name in
>SubjectName (perhaps because it's a v1 certificate? :), then what
>attribute should be used?

DC, period. If you think you can put it in CN, why not put it in O? Or OU?

--Paul Hoffman, Director
--VPN Consortium