pkix-1----Page:6
1  2  3  4  5  6  7  8  9  10  11  12  13  14  15 

Name Constraints
Implementation requirements clarified for apps
MUST be able to process directoryName
SHOULD be able to process rfc822Name, uniformResourceIdentifier, dNSName, and iPAddress
CAs MUST NOT impose constraints on x400Address, ediPartyName, or registeredID
Syntax for URI name constraints extended:
uriconstraint = ["."] domainstring |
scheme ":" ["//"] hostconstraint [schemespecific]
hostconstraint = ["@"] ["."] domainstring [":" port]
PPT Version