Subject: CRL signing certificats

From: Peter Sylvester <[email-masked]>
Date: Tue, 15 May 2001 17:33:58 +0200 (MET DST)

I would like to know the position of the group concerning
certificates for CRL signing. If I resume the previous
discussions then it seems to me that it is possible
to have 

- separate signing keys and certificates for crl and cert signing.
- that a crl signing certificate can have the same DN as CA
  in order to avoid an extension.

If this is the case, then it seems to me that the comment on
page 60 concerning self issued certificates may need some
clarification.