Subject: RE: PI: 10: single serialNumber attribute

From: "Manger, James H" <[email-masked]>
Date: Tue, 20 Jul 2004 10:05:59 +1000

Sure, that DN has 2 permanent identifiers.
However, only one is a PI for this subject.  A cert for this subject can ignore the other PI.  An 'instanceNumber' is unnecessary as DNs are hierarchical so the "deepest" serialNumber attribute will always be the most specific to the subject.

> 	----------
> 	From: 	Anders Rundgren [mailto:[email-masked]] 
> 	Sent:	Monday, 19 July 2004 7:52 PM
> 	To:	Manger, James H; [email-masked]
> 
> 	But is this not actually a prime example of a scheme using TWO PIs?
> 
> 	This would however also require an updated specification where something like an optional "instanceNumber" would be featured to point out the actual serialNumber to use.
> 
> 
	>> For example: cn="John Doe" serialNumber=12345, o="Acme Ltd" serialNumber="DUNS 554433", c=US.  The PI extension would refer to 12345.