Re: Can we make this kind of certificate?

Richard Levitte - VMS Whacker <levitte@lp.se> Sat, 06 March 2004 08:23 UTC

Received: from above.proper.com (above.proper.com [208.184.76.39]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id DAA08276 for <pkix-archive@lists.ietf.org>; Sat, 6 Mar 2004 03:23:58 -0500 (EST)
Received: from above.proper.com (localhost.vpnc.org [127.0.0.1]) by above.proper.com (8.12.11/8.12.8) with ESMTP id i2674QTq086493; Fri, 5 Mar 2004 23:04:26 -0800 (PST) (envelope-from owner-ietf-pkix@mail.imc.org)
Received: (from majordom@localhost) by above.proper.com (8.12.11/8.12.9/Submit) id i2674QwN086491; Fri, 5 Mar 2004 23:04:26 -0800 (PST)
X-Authentication-Warning: above.proper.com: majordom set sender to owner-ietf-pkix@mail.imc.org using -f
Received: from nic.lp.se (nic.lp.se [213.212.3.208]) by above.proper.com (8.12.11/8.12.8) with ESMTP id i2674Odi086445 for <ietf-pkix@imc.org>; Fri, 5 Mar 2004 23:04:25 -0800 (PST) (envelope-from levitte@lp.se)
Received: from localhost (127.0.0.1) by nic.lp.se (MX V5.3 VnHj) with ESMTP; Sat, 6 Mar 2004 08:03:56 +0100
Date: Sat, 06 Mar 2004 08:03:56 +0100
Message-ID: <20040306.080356.52165840.levitte@lp.se>
To: jhyoon@kisa.or.kr
CC: ietf-pkix@imc.org
Subject: Re: Can we make this kind of certificate?
From: Richard Levitte - VMS Whacker <levitte@lp.se>
In-Reply-To: <002e01c40312$69fe3aa0$810410ac@somethingnew>
References: <002e01c40312$69fe3aa0$810410ac@somethingnew>
X-URL: http://www.lp.se/
X-Waved: dead chicken, GNU emacs 21.3.1, Mew version 4.0.63
X-Mew: See http://www.mew.org/
X-Mailer: Mew version 4.0.63 on Emacs 21.3.1 / Mule 5.0 (SAKAKI)
MIME-Version: 1.0
Content-Type: Text/Plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Sender: owner-ietf-pkix@mail.imc.org
Precedence: bulk
List-Archive: <http://www.imc.org/ietf-pkix/mail-archive/>
List-ID: <ietf-pkix.imc.org>
List-Unsubscribe: <mailto:ietf-pkix-request@imc.org?body=unsubscribe>
Content-Transfer-Encoding: 7bit

In message <002e01c40312$69fe3aa0$810410ac@somethingnew> on Sat, 6 Mar 2004 09:31:49 +0900, "Jaeho Yoon" <jhyoon@kisa.or.kr> said:

jhyoon> Dear experts,
jhyoon> 
jhyoon> I have been studying the PKI in various environment. In doing
jhyoon> that, I am troubled with the needs of this kind of
jhyoon> certificate.
jhyoon> 
jhyoon> 'a certificate issued by multiple CAs'

Within the framework of X.509, there no such thing.  However, there's
nothing stopping you from having several certificates, signed by
several CAs, from the same certificate request.  How that would be
handled by software is a different question, though...

HTH.  HAND.

-----
Please consider sponsoring my work on free software.
See http://www.free.lp.se/sponsoring.html for details.

-- 
Richard Levitte     | http://richard.levitte.org/ | Tunnlandsv. 52
Levitte Programming | http://www.lp.se/           | S-168 36 Bromma
T: +46-708-26 53 44 |                             | SWEDEN
     "Price, performance, quality...  choose the two you like"