pkix-4----Page:4
1  2  3  4  5  6  7  8 

Issue #2
Denis: Construction of a CRL path is not discussed in RFC 3280
Response: Wrong. It is discussed in section "5.1.1.3 signatureValue”

Comment: It is obvious that a certification path of the CRL signer must be generated and validated as part of CRL verification 
PPT Version