Name Constraints

• Name Constraints

  • limit CA authority to specified sets of subject names
  • permitted and excluded subtrees

• Important across “administrative domains,” through either root or cross-certification.

Limit authority to:

O=Structured Arts Computing, C=US

Limit authority to:

O=Acme Widgets, C=US

Previous slide

Next slide

Back to first slide

View graphic version