I have six comments. None of them are show stoppers.
1. Section 1,1, 1st sentence: s/draft/document/
2. Should Section 1,2 reference RFC 3369?
3. Section 1.4: s/MD2 use for certificate signatures discouraged/The use
of the MD5 message digest for certificate signatures is discouraged/
4. Delete Section 1.5 before submitting the document to the IESG.
5. Section 4.4.2 include the following paragraph:
If the key usage extension is not specified, receiving clients MUST
presume that the digitalSignature and nonRepudiation bits are set.
Should there be an 'only' in this sentence?
6. Section 4.4.4, 2nd paragraph, last sentence. Add a period.
Russ