Have you looked at PKCS #6 (available via anonymous ftp from rsa.com)?
It gives a syntax for extended certificates that includes a set of
attributes as well as the distinguished name and public key.
No, I have not, but I will do so at the first opportunity. If an already worked
out
standard exists, we should try to take advantage of it.
X9F1 is looking at similar structures for the X9.30 and X9.31 DSA/RSA
standards.
I would hope that PEM, X.509, and the X9.30 standards will all converge
to support these common requirements.
And the recent "chance to fix X.509" seems to offer some opportunity
in this direction.
Agree strongly!
Bob