- Any certificate emitted by a PEM implementation, shall use
the object identifier for RSA (see Annex G of X.509) to identify an
RSA public key carried in the SubjectPublicKeyInfo field. However,
PEM implementation shall accept both this object identifier and the
"RSAEncryption" object identifier (from PKCS), in this field in
"received" certificates, e.g., certificates in incoming PEM messages.
Hmmm.
There are currently two PEM implementations and a CSU that generate
the rsaEncryption OID. I presume the "current implementations"
argument didn't work this time. (Perhaps the corresponding
manufacturers weren't well represented at the WG meeting :-)). I
would ask that this issue be reconsidered to allow PEM implementations
to generate and receive either type of OID since both have found their
way into implementations. This would enable the fastest deployment.
-steve