Re: SMIMECapabilities Attribute

I agree with Blake also.  It might make sense to add another authenticated
attribute that specifies exactly which cert of the SET is the key management
cert.  This could be done with an issuerAndSerialNumber, as is done to
identify the signing cert.

        --Jeff

Russ Housley wrote:
> Blake:
>
> So, you suggest that key management certificates be carried in the existing
> SET OF ExtendedCertificateOrCertificate.  This is fine with me.
>
> We need to say that this SHOULD be done.