Hi,
Can I add more than one e-mail addresses as subjAltName extionsion in
X.509 cert? Since, value type of subjAltName is GeneralNames, I know I
am allowed to do that syntactically.
My questions are :
- Does this fall within the best practices for X.509 based PKI?
- Are the NSS APIs designed to handle more than one e-mail address
in subjAlName extension?
- Do other applications (like thunderbird and other mail), would
make sure that they search through all the e-mail addresses to look for
a match?
- Would a commercial CAs sign a cert request with more than e-mail
address? Or, would they force me to create separate cert request for
each e-mail address.
Thanks.
--
Subrata
--
dev-tech-crypto mailing list
dev-tech-crypto@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-tech-crypto
